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PREFACE 



This manual describes the KD11-E Central Processing Unit (M7265 and M7266). The user must have 
a general knowledge of digital circuitry and a basic understanding of PDP-1 1 computers to completely 
understand the contents of this manual. 



The following related documents may be valuable as references: 

PDP-11 Peripherals Handbook 

PDP-11/34 Processor Handbook 

PDP-11/34 System User's Guide (EK-11034-OP-001) 

KD11-E Print Set (MP00043) 



CHAPTER 1 
OVERALL DESCRIPTION 



The KD11-E is a 2-board central processing unit (CPU) that is combined with a memory system, 
Unibus terminators, and optional peripherals in a DD11-P backpanel to build a basic PDP-11/34 
computer. The unit connects directly to the Unibus as a subsystem, and is capable of controlling the 
time allocation of the Unibus for peripherals, performing arithmetic and logic operations, and decod- 
ing instructions. It can perform data transfers directly between I/O devices and memory, do both 
single- and double-operand addressing, handle both 16-bit word and 8-bit byte data, and address up to 
128K of Unibus address space via a memory management system. 

The KD11-E is program-compatible with both the KD11-A (PDP-11/35 and PDP-11/40 computer 
systems) and the LSI- 11 (with the inclusion of the two special LSI- 11 instructions). It contains the 
KT1 1-D Memory Management System (optional with the KD1 1-A, not offered with the LSI-1 1) and 
executes the Extended Instruction Set (EIS) instructions, which were optional with the KD11-A and 
standard with the LSI-1 1. The KD11-E does not execute the Floating Instruction Set (FIS). 
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CHAPTER 2 
INSTRUCTION SET 



2.1 INTRODUCTION 

The KD11-E is defined by its instruction set. The sequences of processor operations are selected 
according to the instruction decoding. The following describes the PDP- 11/34 instructions and 
instruction set addressing modes along with instruction set differences from those of the KD11-A, 
KD11-B, and KD11-D. 

2.2 ADDRESSING MODES 

Data stored in memory must be accessed and manipulated. Data handling is specified by a PDP-1 1 /34 
instruction (MOV, ADD, etc.), which usually indicates: 

1. The function (operation code) 

2. A general-purpose register to be used when locating the source operand and/or locating the 
destination operand 

3. An addressing mode (to specify how the selected register(s) is to be used) 

Because a large portion of the data handled by a computer is usually structured (in character strings, in 
arrays, in lists, etc.), the PDP-1 1/34 has been designed to handle structured data efficiently and flex- 
ibly. The general registers may be used with an instruction in any of the following ways: 

1. As accumulators. The data to be manipulated resides within the register. 

2. As pointers. The contents of the register are the address of the operand, rather than the 
operand itself. 

3. As pointers, which automatically step through core locations. Automatically stepping for- 
ward through consecutive core locations is known as autoincrement addressing; automat- 
ically stepping backward is known as autodecrement addressing. These modes are 
particularly useful for processing tabular data. 

4. As index registers. In this instance the contents of the register and the word following the 
instruction are summed to produce the address of the operand. This allows easy access to 
variable entries in a list. 

PDP-1 1 /34s also have instruction addressing mode combinations that facilitate temporary data stor- 
age structures for convenient handling of data which must be frequently accessed. This is known as the 

"stack." 
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In the PDP- 11/34, any register can be used as a "stack pointer" under program control; however, 
certain instructions associated with subroutine linkage and interrupt service automatically use Register 
6 as a "hardware stack pointer." For this reason, R6 is frequently referred to as the "SP." 

R7 is used by the processor as its program counter (PC). 

Two types of instructions utilize the addressing modes: single-operand and double-operand. Figure 2-1 
shows the formats of these two types of instructions. The addressing modes are listed in Table 2-1. 
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Figure 2-1 Addressing Mode Instruction Formats 
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Table 2-1 Addressing Modes 



Mode 


Binary 
Code 


Name 


Assembler 
Syntax* 


Function 


Direct Modes 


0 ! 


000 


Register 


Rn 


Register contains operand. 


2 


010 


Autoincrement 


(Rn)+ 


Register contains address of oper- 
and. Register contents incremented 
after reference. 


4 


100 


Autodecrement 


-(Rn) 


Register contents decremented 
before reference register contains 
address of operand. 


6 


110 


Index 


X(Rn) 


Value X (stored in a word following 
the instruction) is added to (Rn) to 
produce address of operand. Nei- 
ther X nor (Rn) is modified. 


Deferred Modes 


1 


001 


Register 
Deferred 


@Rn or (Rn) 


Register contains the address of the 
operand. 


3 


011 


Autoincrement 
Deferred 


@(Rn)+ 


Register is first used as a pointer to 
a word containing the address of 
the operand, then incremented 
(always by two, even for byte 
instructions). 


5 


101 


Autodecrement 
Deferred 


@-(Rn) 


Register is decremented (always by 
two, even for byte instructions) and 
then used as a pointer to a word 
containing the address of the 
operand. 


7 


111 


Index Deferred 


@X(Rn) 


Value X (stored in the memory 
word following the instruction) and 
(Rn) are added and the sum is used 
as a pointer to a word containing 
the address of the operand. Neither 
X nor (Rn) is modified. 
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Table 2-1 Addressing Modes (cont) 



Mode 


Binary 
Code 


Name 


Assembler 
Syntax* 


Function 


PC Addressing 


2 


010 


Immediate 


#n 


Operand follows instruction. 


3 


Oil 


Absolute 


@#A 


Absolute address follows 
instruction. 


6 


110 


Relative 


A 


Address of A, relative to the 
instruction, follows the instruction. 


7 


111 


Relative Deferred 


@A 


Address of location containing 
address of A, relative to the instruc- 
tion, follows the instruction. 



* Rn = Register 

X, n, A = next program counter (PC) word (constant) 



2.3 PDP-11/34INSTRUCTIONS 

The PDP- 11/34 instructions can be divided into five groups: 

1. Single-Operand Instructions (shifts, multiple precision instructions, rotations) 

2. Double-Operand Instructions (arithmetic and logical instructions) 

3. Program Control Instructions (branches, subroutines, traps) 

4. Operate Group Instructions (processor control operations) 

5. Condition Code Operators (processor status word bit instructions) 

Tables 2-2 through 2-6 list each instruction, including byte instructions for the respective instruction 
groups. Figure 2-2 shows the six different instruction formats of the instruction set, and the individual 
instructions in each format. 
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Table 2-2 Single Operand Instructions 



Mnemonic 


OP Code 


Operation 


Condition Codes 


Description 


CLR 


0050DD* 


(dst) 1 * <- 0 


N: 


cleared 


Contents of specified destination are replaced with zeroes. 


riT "ot> 


lUD ODD 




Z: 


set 




Clear 






V: 


cleared 










C: 






COM 


005 1DD 


(dst) «- n (dst) 


N: 


set if most significant 


Replaces the contents of the destination address by their 


CUMB 


1 nc 1 p\P\ 
IUj IDD 






bit of result is 0 


logical complement ^eacn uit equal 10 u sex ana eacn dil equal 


Complement 






Z: 


set if result is 0 


to 1 cleared). 








v . 


cjcdreu 










C: 


set 




INC 


005 2DD 


(dst) <- (dst) + 1 


N: 


set if result is less than 0 


Add 1 to the contents of the destination. 


INCB 


1052DD 




Z: 


set if result is 0 




Increment 






V. 


set it (cist) was U / / / / / 










C: 


not affected 




DEC 


005 3DD 


(dst) «- (dst) - 1 


N: 


set if result is less than 0 


Subtract 1 from the contents of the destination. 


DECB 


1053DD 




L. 


set if result is 0 




Decrement 






V: 


set if (dst) was 100000 










C: 


not affected 




NEG 


0054DD 


(dst) (dst) 


N: 


set if result is less than 0 


Replaces the contents of the destination address by its 2's com- 


NEGB 


1054DD 




Z: 


set if result is 0 


plement. Note that i 00000 is replaced by itself. 


Negate 






V: 


set if result is 100000 










C: 


cleared if result is 0 




ADC 


005 5DD 


(dst) <- (dst) + C 


N: 


set if result is less than 0 


Adds the contents of the C-bit into the destination. This permit 


ADCB 


1055DD 




Z: 


set if result is 0 


the carry from the addition of the low-order words/bytes to be 


Add Carry 






V: 


set if (dst) is 077777 and 
C is 1 


carried into the high-order results. 








C: 


set if (dst) is 177777 and 












Cis 1 





Mnemonic 



SBC 
SBCB 

Subtract Carry 



TST 

TSTB 

Test 



ROR 
RORB 
Rotate Right 



ROL 
ROLB 
Rotate Left 



OP Code 



0056DD 
1056DD 



0057DD 
1057DD 



0060DD 



006 1DD 
1061DD 



Operation 



(dst) +- (dst) -C 



(dst) <- (dst) 



(dst) «- (dst) 
rotate right 
one place. 



(dst) <- (dst) 
rotate left 
one place. 



2-2 Single Operand Instructions (Cont) 



Condition Codes 



Description 



N: 
Z: 
V: 
C: 



N: 
Z: 
V: 
C: 

N: 

Z: 

V: 



N: 



set if result is less than 0 
set if result is 0 
set if (dst) was 100000 
cleared if (dst) is 0 and C 
is 1 

set if result is less than 0 
set if result is 0 
cleared 
cleared 

set if high-order bit of 
the result is set 
set if all bits of result 
are 0 

loaded with the exclusive- 
OR of the N-bit and the 
C-bit as set by ROR 



set if the high order bit of 
the result word is set 
(result <0); cleared 
otherwise 
Z: set if all bits of the 
result word = 0; cleared 
otherwise 
V: loaded with the exclusive - 
OR of the N-bit and C-bit 
(as set by the completion 
of the rotate operation) 
C: loaded with the high order 
bit of the destination 



Subtracts the contents of the C-bit from the destination. This 
permits the carry from the subtraction of the low order words/ 
bytes to be subtracted from the high-order part of the result. 



Sets the condition codes N and Z according to the contents of 
the destination address. 



Rotates all bits of the destination right one place. The low- 
order bit is loaded into the C-bit and the previous contents of 
the C-bit are loaded into the high-order bit of the destination. 



Rotate all bits of the destination left one place. The high- 
order bit is loaded into the C-bit of the status word and the 
previous contents of the C-bit are loaded into the low-order 
bit of the destination. 



Table 2-2 Single Operand Instructions 



(Cont) 



Mnemonic 


OP Code 


Operation 


Condition Codes 


Description 


ASR 


0062DD 


(dst) <- (dst) 


N: 


set if the high order bit 


Shifts all bits of the destination right one place. The high- 


ASRB 


1062DD 


shifted one 




of the result is set 


order bit is replicated. The C-bit is loaded from the low-order 


Arithmetic 




place to the 




(result < 0), cleared 


bit of the destination. ASR performs signed division of the 


Shift Right 




right. 




otherwise 


destination by two. 








Z: 


set if the result = 0; 












cleared otherwise 










V: 


loaded from the exclusive - 












OR of the N-bit and C-bit 












(as set by the completion 












of the shift operation). 










C: 


loaded from low order bit 












of the destination 




ASL 


0063DD 


(dst) «- (dst) 


N: 


set if high-order bit of the 


Shifts all bits of the destination left one place. The low-order 


ASLB 


1063DD 


shifted one 




(result < 0); cleared 


bit is loaded with a 0. The C-bit of the status word is loaded 


Arithmetic 




place to the left. 




otherwise 


from the high-order bit of the destination. ASL performs a 


Shift Left 






Z: 


set if the result = 0; cleared 


signed multiplication of the destination by 2 with overflow 










otherwise 


indication. 








V: 


loaded with the exclusive - 












OR of the N-bit and C-bit 












and C-bit (as set by the 












completion of the shift 












operation) 










C: 


loaded with the high-order 












bit of the destination 
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Single Operand Instructions (Cont) 



Mnemonic 


OP Code 


Operation 


Condition Codes 


Description 


ASH 

Aritlimf'tip 
r\i in nut; tiv./ 

Shift 


072RSS 


R <- R Shifted 
Arithmetically NN 
places to right or 
left 

Where NN = (src) 


N: set if result <0; cleared 
otherwi se 

Z: set if result = 0; cleared 
otherwise. 

V: set if sign of register 
changed during shift; cleared 
otherwise. 

C: loaded from last bit shift 
out of register. 


The contents of the register are shifted right or left 
the number of times specified by the source 
operand. The shift count is taken as the low-order 
6 bits of the source operand. This number ranges 
from -32 to +31. Negative is a right shift and posi- 
tive is a left shift. See Paragraph 2.5 for example. 


ASHC 
Arithmetic 
Shift Combined 


073RSS 


R, Rvl «- R, Rvl 
The double word 
is shifted NN 
places to the right 
or left, where NN = 
(src) 


N: set if result <0; cleared 
otherwise. 

Z: set if result = 0; cleared 
otherwise. 

V: set if sign bit changes 
during the shift; cleared 
otherwise. 

C: loaded with high-order bit 
when right shift (loaded with 
the last bit shifted out of the 
32-bit operand). 


The contents of the register and the register ORed 
with one are treated as one 32-bit word. Rvl (bits . 
0-15) and R (bits 16-31) are shifted right or left 
the number of times specified by the shift count. 
The shift count is taken as the low-order 6 bits of 
the source operand. This number ranges from -32 
to +3 1 . Negative is a right shift and positive is a 
left shift. 

When the register chosen is an odd number, the 
register and the register ORed with one are the 
same. In this case, the right shift becomes a rotate. 
The 16-bit word is rotated right the number of bits 
specified by the shift count. See Paragraph 2.5 for 
example. 


SXT 

Sign Extend 



0067DD 


(dst) «- 0 if N bit 
is clear 

(dst) *- -1 N bit 
is set 


N: unaffected 
Z: set if N bit clear 
V: cleared 
C: unaffected 


If the condition code bit N is set then a -1 is placed 
in the destination operand: if N bit is clear, then a 
0 is placed in the destination operand. This instruc- 
tion is particularly useful in multiple precision 
arithmetic because it permits the sign to be extended 
through multiple words. 



Table 2-2 Single Operand Instructions (Cont) 



Mnemonic 


OP Code 


Operation 


Condition Codes 


Description 


SWAB 
Swap Byte 


0003DD 


Byte 1/Byte 0 
byte u/i>yte i 


N: set if high-order bit of 
low-order byte (bit 7) of 
result is set; cleared 
otherwise. 

Z: set if low-order byte of 
result = 0; cleared otherwise. 
V: cleared 
C: cleared 


Exchanges high-order byte and low-order byte of the 
destination word (destination must be a word 
address). 



Table 2-3 Double Operand Instructions 



Mnemonic 


OP Code 


Operation 


Condition Codes 


Description 


MOV 


01SSDD* 


j. 

(dst) «- (src) f 


N: 


set if (src) < 0, cleared 


Word: Moves the source operand to the destination location. 


MOVB 


11SSDD 






otherwise 


The previous contents of the destination are lost. The source 


Move 






Z: 


set if (src) = 0; cleared 


operand is not affected. 










otherwise 


Byte: Same as MOV The MOVB to a resistor (unique among 








V: 


cleared 


byte instructions) extends the most significant bit of the low 








C: 


not affected 


order byte (sign extension). Otherwise MOVB operates on 












bytes exactly as MOV operates on words. 


CMP 


02SSDD 


(src) - (dst) 


' N: 


set if result < 0, cleared 


Compares the source and destination operands and sets the 


DMPB 


12SSDD 


[in detail . 




otherwise 


condition codes which may then be used for arithmetic and 


Compare 




(src) + - 


Z: 


set if result = 0; cleared 


logical conditional branches. Both operands are unaffected. 






(dst) + 1 ] 




otherwise 


The only action is to set the condition codes. The compare is 








V: 


set if there was arithmetic 


customarily followed by a conditional branch instruction. Note 










overflow (i.e., operands 


that unlike the subtract instruction the order of operation is 










were of opposite signs 


(src) - (dst), not (dst) - (src). 










and the sign of the des- 












tination was the same 












as the sign of the result); 












cleared otherwise. 










C: 


cleared if there was a 












carry from the most sig- 












nificant bit of the result; 












set otherwise 





Table 2-3 Double Operand Instructions (Cont) 



Mnemonic 


OP Code 


Operation 


Condition Codes 


Description 


BIT 


03SSDD 


(src) A (dst) 


N: 


set if high order bit of 


Performs logical AND comparison of the source and destination 


BITB 


13SSDD 






result set; cleared other- 


operands and modifies condition codes accordingly. Neither 


Bit Test 








wise 


the source nor destination operands are affected. The BIT in- 








Z: 


set if result = 0; cleared 


struction may be used to test whether any of the corresponding 










otherwise 


bits that are set in the destination are clear in the source. 








V: 


cleared 










C: 


not affected 




BIC 


04SSDD 


(dst) <- ~ (src) 


N: 


set if high order bit of 


Clears each bit in the destination that corresponds to a set bit 


BICB 


14SSDD 


A (dst) 




result set; cleared other- 


in the source. The original contents of the destination are lost. 


Bit Clear 








wise 


The contents of the source are unaffected. 








Z: 


set if result = 0; cleared 












otherwise 










V: 


cleared 










C: 


not affected 




BIS 


05SSDD 


(dst) «- (src) 


N: 


set if high order bit of 


Performs inclusive -OR operation between the source and des- 


BISB 


15SSDD 


A (dst) 




result set; cleared other- 


tination operands and leaves the result at the destination 


Bit Set 








wise 


address; i.e., corresponding bits set in the destination. The 








Z: 


set if result = 0; cleared 


contents of the destination are lost. 










otherwise 










V: 


cleared 










C: 


not affected 




ADD 


06SSDD 


(dst) <- (src) 


N: 


set if result 0; cleared 


Adds the source operand to the destination operand and stores 


Add 




+ (dst) 




otherwise 


the result at the destination address. The original contents of 








Z: 


set if result = 0; cleared 


the destination are lost. The contents of the source are not 










otherwise 


affected. Two's complement addition is performed. 



Table 2-3 Double Operand Instruction (Cont) 



Mnemonic 



OP Code 



Operation 



Condition Codes 



Description 



ADD (Cont) 



SUB 
Subtract 



16SSDD 



(dst) «- (dst) - 
(src) in detail, 
(dst) + ~ (src) 
+ 1 (dst) 



set if there was arithmetic 
overflow as a result of the 
operation (that is, both 
operands were of the same 
sign and the result was of 
the opposite sign); cleared 
otherwise. 

set if there was a carry from 
the most significant bit of 
the result; cleared other- 
wise. 



N: set if result <0; cleared 
otherwise 

Z: set if result = 0; cleared 
otherwise 

V: set if there was arithmetic 
overflow as a result of 
the operation (i.e., if 
operands were of op- 
posite signs and the sign 
of the source was the 
same as the sign of the 
result); cleared otherwise 

C: cleared if there was a 
carry from the most 
significant bit of the 
result; set otherwise 



Subtracts the source operand from the destination operand and 
leaves the result at the destination address. The original contents 
of the destination are lost. The contents of the source are not 
affected. In double precision arithmetic, the C-bit, when set, 
indicates a borrow. 



* SS = source (address mode and register) 
f (src) = source contents 



Table 2-3 



Double Operand Instructions (Cont) 



Mnemonic 


OP Code 


Operation 


Condition Codes 


Description 


MUL 
Multiply 


070RSS 


R, Rvl<-Rx(src) 


N: set if product is <0; 
cleared otherwise. 
Z: set if product is 0; 
cleared otherwise. 
V: cleared 

C: set if the result is less 
than -2 15 or greater than 
or equal to 2 15 -1. 


The contents of the destination register and source 
taken as two's complement integers are multiplied 
and stored in the destination register and the suc- 
ceeding register (if R is even). If R is odd, only the 
low-order product is stored. Assembler syntax is: 
MULS,R. 

(Note that the actual destination is R, Rvl which 
reduces to just R when R is odd.) 
(See Paragraph 2.5.1 for example). 


DIV 

Divide 


071RSS 


R, Rvl^-R, Rvl 
(src) 


N: set if quotient <0; 
cleared otherwise. 
Z: set if quotient = 0; 
cleared otherwise. 
V: set if source = 0 or if the 
absolute value of the register 
is larger than the absolute 
value of the source. (In this 
case the instruction is 
aborted because the quotient 
would exceed 1 5 bits.) 
C: set if divide 0 attempted; 
cleared otherwise. 


The 32-bit two's complement integer in R and Rvl 
is divided by the source operand. The quotient is 
left in R; the remainder is of the same sign as the 
dividend. R must be even. 
(See Paragraph 2.5.2 for example.) 


XOR 


074RDD 


(dst) <- Rv (dst) 


N: set if the result <0; 
cleared otherwise. 
Z: set if result = 0; 
cleared otherwise. 
V: cleared 
C: unaffected 


The exclusive OR of the register and destination 
operand is stored in the destination address. Contents 
of register are unaffected. Assembler format is 
XOR R,D. 



Table 2-4 Program Control Instructions 



Mnemonic 


OP Code 


Operation 


Condition Codes 


Description 


BR 

Branch 


000400 

xxxf 


PC <- PC + 

(2 X offset) 


Unaffected 


Provides a way of transferring program control within a range 
of - 128 to +127 words with a one word instruction. It is an 
unconditional branch. 


BNE 

Branch if not 
equal 


001000 

XXX 


PC <- PC + 
(2 X offset) 
if Z = 0 


Unaffected 


Tests the state of the Z-bit and causes a branch if the Z-bit is 
is clear. BNE is the complementary operation to BEQ. It is 
used to test inequality following a CMP, to test that some bits 
set in the destination were also in the source, following a BIT, 
and generally, to test that the result of the previous operation 
was not 0. 


BEQ 

Branch if equal 


001400 

XXX 


PC^PC + 

(2 X offset) if 
Z= 1 


Unaffected 


Tests the state of the Z-bit and causes a branch if Z is set. As 
an example, it is used to test equality following a CMP opera- 
tion, to test that no bits set in the destination were also set in 
the source following a BIT operation, and generally, to test 
that the result of the previous operation was 0. 


BGE 

Branch if greater 
than or equal 


002000 

XXX 


PC <- PC + 

(2 X offset) if 
N v V = 0 


Unaffected 


Causes a branch if N and V are either both clear or both set. 
BGE is the complementary operation to BLT. Thus, BGE 
always causes a branch when it follows an operation that 
caused addition to two positive numbers. BGE also causes a 
branch on a 0 result. 



Table 2-4 Program Control Instructions (Cont) 



Mnemonic 


OP Code 


Operation 


Condition Codes 


Description 


RT T 

Branch if less 
than 


UUZtUu 
XXX 


(2 X offset) if 
N V = 1 


T Tn aff*pr»tpH 
uiial icuicu. 


v-dudCo d DldllCIl 11 Lllv CALl USlVC-Wlx Ol 111C ri - dllU V -UllS die 1. 

Thus, BLT always branches following an operation that added 
two negative numbers, even if overflow occurred. In particular, 
BLT always causes a branch if it follows a CMP instruction 
operating on a negative source and a positive destination (even 
if overflow occurred). Further, BLT never causes a branch when 
it follows a CMP instruction operating on a positive source and 
negative destination. BLT does not cause a branch if the result 
of the previous operation was 0 (without overflow). 


BGT 

Branch if greater 
than 


003000 

XXX 


PC <- PC + 
(2 X offset) 
if Z v(N¥ 
V) = 0 


Unaffected 


Operation of BGT is similar to BGE, except BGT does not 
cause a branch on a 0 result. 


BLE 

Branch if less than 
or equal to 


003400 

XXX 


PC <- PC + 
(2 X offset) if 
Zv(NVV) 
= 1 


Unaffected 


Operation is similar to BLT, but in addition will cause a branch 
if the result of the previous operation was 0. 


BPL 

Branch if plus 


100000 

XXX 


PC <- PC + 

(2 X offset) if 
N = 0 


Unaffected 


Tests the state of the N-bit and causes a branch if N is clear. 
BPL is the complementary operation of BMI. 


BMI 

Branch if minus 


100400 

XXX 


PC <- PC + 
(2 X offset) if 
N= 1 


Unaffected 


Tests the state of the N-bit and causes a branch if N is set. It is 
used to test the sign (most significant bit) of the result of the 
previous operation. 



Table 2-4 Program Control Instructions (Cont) 



Mnemonic 


OP Code 


Operation 


Condition Codes 


Description 


BHI 

Branch if higher 


101000 

XXX 


PC <- PC + 

(2 X offset) if 
C = 0 


Unaffected 


Causes a branch if the previous operation causes neither a carry 
nor a 0 result. This will happen in comparison (CMP) operations 
as long as the source has a higher unsigned value than the 
destination. 


BLOS 

Branch if lower 
or same 


101400 

XXX 


PC ^ PC + 

(2 X offset) if 
CvZ=l 


Unaffected 


Causes a branch if the previous operation caused either a carry 
or a 0 result. BLOS is the complementary operation to BHI. 
The branch occurs in comparison operations as long as the 

conrfP ic pniml tn or liiic a 1 n\x/fr imcionpH i/iiliiA than tVif* 
dUUltv lo CrlfUaJ IU \Jl lido a 1UWC1 UllMgliCU VdJUC 11 Lai 1 Ulv 

destination. Comparison of unsigned values with the CMP 
instruction to be tested for "higher or same" and "higher" by 
a simple test of the C-bit. 


BVC 

Branch if V-bit 
clear 


102000 

XXX 


PC <- PC + 

(2 X offset) if 
V = 0 


Unaffected 


Tests the state of the V-bit and causes a branch if the V-bit is 
clear. BVC is complementary operation to BVS. 


BVS 

Branch if V-bit set 


102400 

XXX 


PC <- PC + 

(2 X offset) if 
V = 1 


Unaffected 


Tests the state of V-bit (overflow) and causes a branch if the 
V-bit is set. BVS is used to detect arithmetic overflow in the 
nrevioiK ooeration 


BCC \ 
BHISJ 

Branch if carry 
clear 

Branch if higher 
than the same 


103000 

XXX 


PC+-PC + 
(2 X offset) if 
C = 0 


Unaffected 


Tests the state of the C-bit and causes a branch if C is clear. 
BCC is the complementary operation to BCS. 


BCS *\ 
BLOJ 

Branch if carry set 
Branch if lower 


103400 

XXX 


PC <- PC + 
(2 X offset) if 
C= 1 


Unaffected 


Tests the state of the C-bit and causes a branch if C is set. It is 
used to test for a carry in the result of a previous operation. 



Table 2-4 Program Control Instructions (Cont) 



Mnemonic 


OP Code 


Operation 


Condition Codes 


Description 


JMP 


000 1DD 


PC<-(dst) 


Unaffected 


JMP provides more flexible program branching than provided 


Jump 








with the branch instruction. Control may be transferred to any 
location in memory (no range limitation) and can be accom- 
plished with the full flexibility of the addressing modes, with 
the exception of register mode 0. Execution of a jump with 
mode 0 will cause an illegal instruction condition. (Program 
control cannot be transferred to a register.) Register deferred 
mode is legal and will cause program control to be transferred 
to the address held in the specified register. Note that in- 
structions are word data and must therefore be fetched from 
an even numbered address. A boundary error trap condition 
will result when the processor attempts to fetch an instruction 
from an odd address. 



Table 2-4 Program Control Instructions (Cont) 



Mnemonic 


OP Code 


Operation 


Condition Codes 


Description 


JRS 

Jump to 
subroutine 


004RDD 


(tmp) «- (dst) 
(tmp is an inter- 
nal processor 
register) 

l(SP)«-reg 
(push reg con- 
tents onto proces- 
sor stack) 
reg <- PC PC 
holds location fol- 
lowing JSR; this 
address PC <- 
(tmp), now put in 
(reg) 


Unaffected 


In execution of the JSR, the old contents of the specified 
register (the linkage pointer) are automatically pushed onto 
the processor stack and new linkage information placed in 
the register. Thus, subroutines nested within subroutines to any 
depth may all be called with the same linkage register. There 
is no need either to plan the maximum depth at which any 
particular subroutine will be called or to include instructions 
in each routine to save and restore the linkage pointer. Further, 
since all linkages are saved in a re-entrant manner on the pro- 
cessor stack, execution of a subroutine may be interrupted, 
and the same subroutine re-entered and executed by an in- 
terrupt service routine. Execution of the initial subroutine can 
then be resumed when other requests are satisfied. This pro- 
cess (called nesting) can proceed to any level. 

JSR PC, dst is a special case of the PDP-1 1 subroutine call 
suitable for subroutine calls that transmit parameters. 


RTS 

Return from 
subroutine 


00020R 


PC<-(reg) 
(reg)^SPt 


Unaffected 


Loads contents of register into PC and pops the top element 
of the processor stack into the specified register. 

Return from a non-re-entrant subroutine is typically made 
through the same register that was used in its call. Thus, a 
subroutine called with a JSR PC, dst exits with an RTS PC, 
and a subroutine called with a JSR R5, dst may pick up 
parameters with addressing modes (R5) +, X (R5), or @X (R5) 
and finally exit , with an RTS R5 . 



Table 2-4 



Program Control 



Mnemonic 



OP Code 



Operation 



Condition Codes 



MARK 



0064NN 



SP <- SP + 2xnn 
PC<-R5 
R5 <- (SP) t 
nn = number of 
parameters 



Unaffected 



i 



Description 



Used as part of the standard PDP-1 1 subroutine return 
convention. MARK facilitates the stack cleanup pro- 
cedures involved in subroutine exit. Assembler format 
is: MARKN 



Example: MOV R5,-(SP) 
MOV P1,-(SP) 
MOV P2,-(SP) 



;place old R5 on stack 
;place N parameters on 
;the stack to be used 
;there by the subroutine 



MOV PN,-(SP) ;places the instruction 

MOV #MARKN,-(SP) ;MARK N on the stack 
;set up address at Mark 
MOV SP,R5 ^instruction 

JSR PC, SUB ;jump to subroutine 

At this point the stack is as follows: 



OLD R5 



PI 



PN 



MARKN 



OLD PC 



And the program is at the address SUB which is the 
beginning of the subroutine. 

SUB: ;execution of the subroutine itself 

RTS R5 : ;the return begins 

This causes the contents of R5 to be placed in the PC 
which then results in the execution of the instruction 
MARK N. The contents of old PC are placed in R5 



MARK N causes: (1) the stack pointer to be adjusted to 
point to the old R5 value; (2) the value now in R5 (the 
old PC) to be placed in the PC; and (3) contents of the 
old R5 to be popped into R5, thus completing the return 
from subroutine. 



Table 2-4 Program Control Instructions (Cont) 



\fl n p in f\ n i r» 

lYlllCllllSillC 


OP Code 


Oneration 


Condition Codes 


Description 


SOB 


077R00 


R«-R- 1 


Unaffected 


The register is decremented. If it is not equal to 0, twice 


^nhtrnpf ntif and 

uUUllavl wilt clilvi 


nlus offset 


if this result ^ 






the offset is subtracted from the PC (now pointing to the 


branch if not 




0 then PC <- PC 






following word). The offset is interpreted as a six-bit 


equal to 0 




- (2 x offset) 






positive number. This instruction provides a fast, efficient 










memou oi loop coinrui. /issemDicr syntax is. 












SOB RA 












where A is the address to which transfer is to be made if 












the decremented R is not equal to 0. Note that the SOB 












instruction cannot be used to transfer control in the 












forward direction. 


RPT 

DI 1 


00000^ 




N: 


loaded from trap vector 


Performs a tran senuenre with a trar> vector address of 14 


Break-point Trap 




'* (SP) <- PC 


Z: 


loaded from trap vector 


Used to call debugging aids. The user is cautioned against 






PC *-(14) 


V: 


loaded from trap vector 


employing code 000003 in programs run under these 






PS<-(16) 


C: 


loaded from trap vector 


debugging aids. 


IOT 


000004 


4(SP)^-PS 


N: 


loaded from trap vector 


Performs a trap sequence with a trap vector address of 


IOT Trap 




1 (SP) «- PC 


Z: 


loaded from trap vector 


20. Used to call the I/O executive routine IOX in the 






PC <- (20) 


C: 


loaded from trap vector 


paper-tape software system and for error reporting in the 






PS<-(22) 






disk operating system. 



Table 2-4 Program Control Instructions (Cont) 



Mnemonic 


OP Code 


Operation 


Condition Codes 


Description 


EMT 


104000 


I (SP) <- PS 


i> . 


1 r\ a n Dn trr\rn iron i m ss 4- /-\r* 

luducu irom udp vector 


All operation codes from 104000 to 104377 are EMT 


Emulator Trap 




1 (SP) <- PC 




lUdUCU 11UII1 lldjJ VCLLUI 


instructions and may be used to transmit information to 








v . 


loducu irom irdp vector 


the emulating routine (e.g., function to be performed). 








L: 


loaded from trap vector 


The trap vector for EMT is at address 30; the new central 












processor status (PS) is taken from the word at address 32. 












r AI TTT /"YVT 

CAU IIUIN 












EMT is used frequently by DEC system software 












and is therefore not recommended for general use. 


TRAP 


104400 to 


1 (SP) <- PS 


N: 


loaded from trap vector 


Operation codes from 104400 to 104777 are TRAP instruc- 




104777 


4(SP)^-PC 


Z: 


loaded from trap vector 


tions. TRAPs and EMTs are identical in operation, except 






PC *- (34) 


V: 


loaded from trap vector 


that the trap vector for TRAP is at address 34. 






PS *- (36) 


C: 


loaded from trap vector 


NOTE 


















Since DEC software makes frequent use of EMT, the 












TRAP instruction is recommended for general use. 



NOTE: Condition Codes are unaffected by these instructions 



*DD = destination (address mode and register) 
f (dst) = destination contents 



Table 2-5 Miscellaneous Instructions 



Mnemonic 


OP Code 


Operation 


Condition Codes 


Description 


RTI 


000002 


PC «- (SP) t 

PCU7 fCp\ f 


N: loaded from processor 
stack 

Z: loaded from processor 
stack 

V: loaded from processor 
stack 

C: loaded from processor 
stack 


Used to exit from an interrupt or trap service routine. 

Trip Pi qhH PxAX/ cirp rpe+nrpH i YinfiriPfi i frntri +|~» q r\m- 
111C 11/ all Li L jti ale ICoLUlcU. ^puppCLl^ ilUlil 11 1C piU~ 

cessor stack. If the RTI sets the T-bit in the PSW, a 
trace trap will occur prior to executing the next 
instruction. 


RTT 


000006 


PC«-(SP)t 

PC (Qp\ f 


N: loaded from processor 
stack 

Z: loaded from processor 
stack 

V: loaded from processor 
stack 

C: loaded from processor 
stack 


This is the same as the RTI instruction, except that it 

inhiHifc a trar»P trc\r\ wfiilp RTT nPrmitc 51 triiPP tTCrn 
JLlllLLUlla a HavC liap, W llllC l\ll pcilllllo a llaUv Clap. 

If a trace trap is pending, the first instruction after the 
RTT will be executed prior to the next "T" trap. In 
the case of the RTI instruction, the "T" trap will 
occur immediately after the RTI. 


MFPI 
MFPD 


0065SS 
1065SS 


(temp) <- (src) 
I (SP) «- (temp) 


N: set if the source <0; 
otherwise cleared 
Z: set if the source = 0; 
otherwise cleared 
V: cleared 
C: unaffected 


This instruction pushes a word onto the current stack 
from an address in previous space. Processor Status 
(bits 13,12). The source address is computed using 
the current registers and memory map. 


MTPI 
MTPD 


0066SS 
1066SS 


(temp)<-(SP) t 
(dst) <- (temp) 


N: set if the source <0; 
otherwise cleared 
Z: set if the source =0; 
otherwise cleared 
V: cleared 
C: unaffected 


This instruction pops a word off the current stack 
determined by PS (bits 15, 14) and stores that word 
into an address in previous space PS (bits 13,12). 
The destination address is computed using the cur- 
rent registers and memory map. 



Table 2-5 Miscellaneous Instructions (Cont) 



Mnemonic 


OP Code 


Operation 


Condition Codes 


Description 


MFPS 


1067DD 


(DST)^PSW 
DST Lower 
8 bits 


N: set if PSW bit 7=1; 
otherwise cleared. 
Z: set if PS [0:7] =0; 
otherwise cleared. 
V: cleared 
C: not affected 


*The 8-bit contents of the PS are moved to the 
effective destination. If destination is mode 0, PS 
bit 7 is sign-extended through upper byte of the 
register, and destination operand is treated as a byte 
address. 


MTPS 


1064SS 


PSW *- (SRC) 


Set according to 
effective SRC operand 
0-3. 


The 8 bits of the effective operand replace the 
current contents of the PSW. The source operand 
address is treated as a byte address. Note that PSW 
bit 4 cannot be set with this instruction. The SRC 
operand remains unchanged. 

*Because there is no hardware to prevent execution 
of these instructions in User mode, it is necessary 
for the system software to prevent any reference to 
the PSW address by a user. 


HALT 


000000 




Unaffected 


Causes the processor operation to cease. The console 
is given control of the processor. The console data 
lights display the address of the HALT instruction 
plus two. Transfers on the Unibus are terminated 
immediately. The PC points to the next instruction 
to be executed. Pressing the CON key on the console 
causes processor operation to resume. No INIT 
signal is given. 



Table 2-5 Miscellaneous Instructions (Cont) 



Mnemonic 


OP Code 


Operation 


Condition Codes 


Description 


WAIT 


000001 




Unaffected 


Provides a way for the processor to relinquish use of 
the bus while it waits for an external interrupt. Having 
been given a WAIT command, the processor will not 
compete for bus by fetching instructions or operands 
from memory. This permits higher transfer rates 
between device and memory, as no processor-induced 
latencies will be encountered by bus requests from 
the device. In WAIT, as in all instructions, the PC 
points to the next instruction following the WAIT 
operation. Thus, when an interrupt causes the PC and 
PS to be pushed onto the stack, the address of the 
next instruction following the WAIT is saved. The exit 
from the interrupt routine (i.e., execution of an RTI 
instruction) will cause resumption of the interrupted 
process at the instruction following the WAIT. 


RESET 


000005 


PC (SP) 
PSW(SP) 


Unaffected 


Sends INIT on the Unibus for 100 ms. All devices on 
the Unibus are reset to their state at power-up. 



Table 2-6 Condition Code Operators 



Mnemonic 


Op Code 


Instruction 


CLC 


000241 


Clear condition code C. 


CLV 


000242 


Clear condition code V. 


CLZ 


000244 


Clear condition code Z. 


CLN 


000250 


Clear condition code N. 


CCC 


000257 


Clear all condition code bits. 


SEC 


000261 


Set condition code C. 


SEV 


000262 


Set condition code V. 


SEZ 


000264 


Set condition code Z. 


SEN 


000270 


Set condition code N. 


sec 


000277 


Set all condition code bits. 



NOTE 

Selectable combinations of condition code bits may 
be cleared or set together. The status of bit 4 controls 
the way in which bits 0, 1, 2, and 3 are to be modi- 
fied. If bit 4 = 1, the specified bits are set; if bit 4 = 
0, the specified bits are cleared. 



1. Single Operand Group (CLR,CLRB,C0M,COMB, INC, INCB.DEC.DECB.NEG.NEGB, ADC, ADCB,SBC,SBCB,TST,TSTB,ROR,RORB,ROL,ROLB,ASR,ASRB, 
ASL.ASLB, JMP.SWAB) 





OP Code 

i i i I i i i i i 


Dst 
1 


15 

2.Double Operand Group(BIT,BITB,BIC,BICB,BIS,BISB,ADD,SUB) 




6 


5 










0 




OP Code 
i 1 i 


Src 

l I 1 i l 


dst 

i i 1 i i 


15 12 

3. Program Control Group 

a. Branch (a II branch instructions) 


11 




6 


5 










0 




OP Code 

i i i 1 i i i 


offset 

i i i i i i i 


15 

b.Jump To Subroutine (JSR) 




8 


7 












0 




i i i i i i 


reg 

i i 


Src/dst 
I 


c. Subroutine Return (RTS) 




O 0 

1 1 1 


O 

i l 




2 

i 




O 




reg 

i i 


d. Traps (break point, IOT.EMT.TRAP) 




OP CODE 

1 i i 1 l I 1 i i 1 i I 1 i i 


4. Operate Groupe ( HALT, WA IT, RTI, RESET) 




OP CODE 

1 I i 1 i I 1 i i 1 i i 1 i i 


5.Condition Code Operators (all condition code instructions) 




O O 

1 1 1 


0 

I I 




2 

i 


4 




N 


Z 


V 


C 



11-1225 



Figure 2-2 PDP-11 Instruction Formats 
2-25 



2.4 INSTRUCTION EXECUTION TIME 

The execution time for an instruction depends on the instruction itself, the modes of addressing used, 
and the type of memory being referenced. In the most general case, the instruction execution time is the 
sum of a source address (SRC) time, a destination address (DST) time, and an execute, fetch (EF) time. 

Instr Time = SRC Time + DST Time + EF Time 

Some of the instructions require only some of these times, and are so noted in Paragraph 2.4.1. All 
timing information is in microseconds, unless otherwise noted. Times are typical; processor timing can 
vary ±10%. 

2.4.1 Basic Instruction Set Timing 

Table 2-7 lists the PDP- 11/34 instruction set, together with the timing characteristics and memory 
cycles required. The timing requirements for determining instruction execution time are listed below. 

Double-Operand (all instructions) 

Instr Time = SRC Time + DST Time + EF Time 
Single-Operand (all instructions) 

Instr Time = DST Time + EF Time 
Branch, Jump, Control, Trap, and Miscellaneous (all instructions) 

Instr Time = EF Time 



1. The times specified apply to both word and byte 
instructions, whether odd or even byte. 

2. Timing is given without regard for NPR or BR 
servicing. 

3. If the memory management is enabled, instruc- 
tion execution times increase by 0.12 ijls for 
each memory cycle used. 

4. AH timing is based on memory with the follow- 
ing performance characteristics: 



NOTES 



Memory 



Access Time 
(/is) 



Cycle Time 

(MS) 



Core 

(MM11-DP) 



0.510 



1.1 



MOS 

(MS11-JP) 



0.635 



0.920 
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Table 2-7 PDP-1 1 /34 Instruction Set 



SOURCE ADDRESS TIME 





Source 


Memory 


Core 


MOS 


Instruction 


Mode 


Cycles 


(MM 11 -DP) 


(MS11-JP) 









jUS 


Ms 


Double Operand 


u 


U 


U.UU 


U.UU 


1 


1 


1.13 


1.26 




2 


1 


1.33 


1.46 




3 


2 


2.37 


2.62 




4 


1 


1.28 


1.41 




5 


2 


2.57 


2.82 




6 


2 


2.57 


2.82 




7 


3 


3.80 


4.18 


DESTINATION TIME 




Destination 


Memory 






Instruction 


Mode 


Cycles 


Core 


MOS 


Modifying Single -Operand 


0 


0 


0.00 


0.00 


and Modifying Double- 


1 


2 


1.62 


1.74 


Operand (Except MOV, 


2 


2 


1.77 


1.89 


SWAB, ROR, ROL, ASR, 


3 


3 


2.90 


3.15 


ASL) 


4 


2 


1 77 






5 


3 


3.00 


3.25 




6 


3 


3.10 


3.35 




7 


4 


4.29 


4.66 


MOV 


0 


0 


0.00 


0.00 




1 


1 


0.93 


0.93 




2 


1 


0.93 


0.93 




3 


2 


2.17 


2.29 




4 


1 


1.13 


1.13 




5 


2 


2.22 


2.34 




6 


2 


2.37 


2.49 




; 7 


3 


3.50 


3.75 


MTPS 


0 


0 


0.00 


0.00 




1 


1 


0.95 


0.95 




2 


1 


1.13 


1.26 




3 


2 


2.26 


2.51 




4 


1 


1.13 


1.26 




5 


2 


2.26 


2.51 




6 


2 


2.44 


2.69 




7 


3 


3.57 


4.20 


MFPS 


0 


0 


0.00 


0.00 




1 


1 


0.64 


0.64 




2 


1 


0.64 


0.64 




3 


2 


1.95 


2.08 




4 


1 


0.82 


0.82 




5 


2 


1.95 


2.08 




6 


2 


2.13 


2.26 




7 


3 


3.26 


3.51 
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Table 2-7 PDP-1 1/34 Instruction Set (Cont) 



EXECUTE, FETCH TIME 



Instruction 


Destination 
Mode 


Memory 
Cycles 


Core 


MOS 


Double Operand 










ADD, SUB, CMP, BIT, BIC, 




1 


2.03 


2.16 


BIS, XOR 










MOV 




1 


1.83 


1.96 


Single Operand 










CLR, COM, INC, DEC, ADC, 




1 


1.83 


1.96 


SBC, TST 










SWAB, NEG 




1 


2.03 


2.16 


ROR, ROL, ASR, ASL 




1 


2.18 


2.31 


MTPS 




2 


2.99 


3.12 


MFPS 




2 


1.99 


2.12 


EIS Instructions (use with DST times) 










MUL 




1 


8.82* 


8.95* 


DIV (overflow) 




1 


2.78 


2.91 








12.48 


12.61 


ASH 




1 


4.18** 


4.31 ** 


ASHC 




1 


4.18** 


4 32** 


Memory Management Instructions 










MFPI(D) 




2 


3.07 


3.14 


MTPI(D) 




2 


3.37 


3.34 


CM/ A O DHD DOT A CD 

aWAB, KOK, RUL, AbR, 


0 


0 


0.00 


0.00 


A CT 

AaL 


1 


2 


1 A 

1.42 


1.54 




I 


Z 


1 C7 

1.5 / 


1.69 




3 


-> 

3 


2.70 


2.95 




A 

4 


2 


1.62 


1 HA 

1.74 




5 


3 


2.80 


3.05 




/; 
O 


3 


2.90 


O 1 c 

3.15 




7 


4 


4.09 


4.46 


Non-modifying 


0 


0 


0.00 


0.00 


Single Operand and 


1 


1 


1.13 


1.26 


Double Operand 


2 


1 


1.28 


1.41 




3 


2 


2.42 


2.67 




4 


1 


1.33 


1.46 




5 


2 


2.52 


2.77 




6 


2 


2.62 


2.87 




7 


3 


3.80 


4.18 
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Table 2-7 PDP-1 1/34 Instruction Set (Cont) 



EXECUTE, FETCH TIME 



Instruction 


Destination 
Mode 


Memory 
Cycles 


Core 


MOS 


MFPI(D) 


0 


0 


0.00 


0.00 


MTPI(D) 


1 


1 


0.98 


1.24 




2 


1 


1.32 


1.44 




3 


2 


2.20 


2.45 




4 


1 


1.18 


1.44 




5 


2 


2.20 


2.45 




6 


2 


2.40 


2.65 




7 


3 


3.59 


3.96 


Branch Instructions 










BR, BNE, BEQ, (Branch) 




1 


2.18 


2.31 


BPL, BMI, BVC, BVS, BCC, 










BCS, BGE, BLT, BGT, BLE, 










BHI, BLOS, BHIS, BLO 










(No Branch) 




1 


1.63 


1.76 


SOB (Branch) 




1 


2.38 


2.51 


(No Branch) 




1 


1.98 


2.11 


Jump Instructions 










JMP 


1 


1 


1.83 


1.96 




2 


1 


2.18 


2.31 




3 


2 


3.12 


3.37 




4 


1 


2.03 


2.16 




5 


2 


3.07 


3.32 




6 


2 


3.07 


3.32 




7 


3 


4.25 


4.78 


JSR 


1 


2 


3.32 


3.44 




2 


2 


3.47 


3.59 




3 


3 


4.40 


4.65 




4 


2 


3.32 


3.44 




5 


3 


4.40 


4.65 




6 


3 


4.60 


4.85 




7 


4 


5.69 


6.06 


RTS 




2 


3.32 


3.57 


MARK 




2 


4.27 


4.52 


RTI, RTT 




3 


4.60 


4.98 


Set or Clear C,V,N,Z 




1 


2.03 


2.16 


HALT 




1 


1.68 


1.81 


WAIT 




1 


1.68 


1.81 


RESET 




1 


100 ms 


100 ms 


IOT, EMT, TRAP, BPT 




5 


7.32 


7.7 



*Add 200 ns for each bit transition in serial data from LSB to MSB. 
**Add 200 ns per shift. 
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2.4.2 Bus Latency Times 

Interrupts (BR requests) are acknowledged at the end of the current instruction. For a typical instruc- 
tion, with an instruction execution time of 4 jis, the average time to request acknowledgement would 
be 2 lis. 

Interrupt service time, which is the time from BR acknowledgement to the first subroutine instruction, 
is 7.32 /lis max for core, and 7.7 for MOS. 

NPR (DMA) latency, which is the time from request to bus mastership for the first NPR device, is 2.5 
/as max. 

2.5 EXTENDED INSTRUCTION SET 

The Extended Instruction Set (EIS) provides the user with the capability of extended manipulation of 
fixed-point numbers. Use of the EIS instructions does not degrade processor timing or affect NPR 
latency. Interrupts are serviced at the end of an EIS instruction. 

The EIS instructions are: 

Mnemonic Instruction Op Code 

MUL Multiply 070RSS 

DIV Divide 071RSS 

ASH Shift arithmetically 072RSS 

ASHC Arithmetic shift combined 073RSS 

The number formats are shown in Figure 2-3. Examples of the operation of each instruction are 
presented in the paragraphs that follow. 



15 14 0 



16-BIT SINGLE WORD: 



r 



32-BIT DOUBLE WORD: 



s 


NUMBER 

I I l I 


15 


14 




0 


S 


HIGH NUMBER PART 
I I 1 I 


15 






0 


LOW NUMBER PART 

I I I I I 



S is the sign bit. 

S = 0 for positive quantities 
S = 1 for negative quantities; number is in 2*s 
complement notation 
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Figure 2-3 Extended Instruction Set Number Formats 
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Multiply Instruction - MUL 070RSS 



Example: 16-bit product (R is odd) 



000241 
012701,400 
070127,10 
1034xx 



Before 

(Rl) = 000400 



, CLC 

[MOW #400,R1 
,MUL#10,R1 
, BCS ERROR 



After 

(Rl) = 004000 



Divide Instruction - DIV 071RSS 



Example: 



005000 

012701,20001 

071027,2 

Before 

(R0) = 000000 
(Rl) = 020001 



;Clear carry condition code 



;Carry will be set if 

;product is less than 

;-2 15 or greater than or ;equal to 2" 

;no significance lost 



, CLR R0 
,MOV#20001,R1 
, DIV #2,R0 

After 

(R0) = 010000 Quotient 
(Rl) = 000001 Remainder 



Arithmetic Shift Instruction - ASH 072RSS 
Example: ASH R0, R3 



Before 

(R3) = 000003 
(R0) = 001234 



After 

(R3) = 000003 
(R0) = 012340 



Arithmetic Shift Combined Instruction - ASHC 073RSS 

Example: Similar to the example for the ASH instruction except that two registers are used. 
2.6 INSTRUCTION SET DIFFERENCES 

Table 2-8 lists the instruction set differences between the PDP- 11/34 and other PDP-11 machines. 
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Table 2-8 Programming Differences 





11/05 and 11/10 


11/35 and 11/40 


11/04 


11/34 


GENERAL REGISTERS (including PC and SP) 


OPR%R,(R)+ 
or OPR%R,-(R) 

OPR%R,@(R)+ 

OPR%R,@-(R) 
(Using the same register 
as both source and 
destination) 


Initial contents of R 
are used as the source 
operand. 


Contents of R are 
incremented by 2 (or 
decremented by 2), 
before being used as 
the source operand. 


Same as 11/05 


Same as 11/05 


JMP(R)+ or JSR 
register, (R)+ (jump 
using autoincrement) 


Contents of R are 
incremented by 2, 
then used as the new 
PC address. 


Initial contents of P 
are used as new PC. 


Same as 11/40 


Same as 11/40 


MOV PC, @#A or 
MOV PC, A (Moving 
the incremented PC 
to a memory address 
referenced by the PC) 


Location A will con- 
tain PC + 2. 


Location A will con- 
tain the PC of the 
move instruction +4 . 


Same as 11/05 


Same as 11/05 


Stack Pointer (SP), 
R6 used for referenc- 
ing. 


Using the SP for 
pointing to odd 
addresses or non- 
existent memory 
causes a halt (double 
bus error). 


Odd address or non- 
existent memory 
references with SP 
cause a fatal trap with 
a new stack created at 
locations 0 and 2. 


Same as 11/05 


Same as 11/05 



Table 2-8 Programming Differences (Cont) 





11/05 and 11/10 


11/35 and 11/40 


11/04 


11/34 


GENERAL REGISTERS (including PC and SP) (Cont) 


Stack Overflow 


Stack limit fixed at 
400 8 overflow (going 
lower) checked after 
modes 4 and 5 using 
R6, and JSR and traps. 
Overflow serviced by 
an overflow trap. No 
red zone. 


Variable limit with stack 
limit option. Overflow 
checked after JSR, traps, 
and address modes 1 , 2, 
4, and 6. Non-altering 
references to stack data 
are always allowed. 
There is a 16-word 
yellow (warning) zone. 

Red zone trap occurs if 
stack is 1 6 words below 
boundary; PS and PC 
are saved at locations 
Oand 2. 


Same as 11/05 


Same as 11/05 



TRAPS AND INTERRUPTS 



RTI Instruction 


First instruction after 
RTI instruction is 
always executed. 


If RTI sets theT-bit, 
the T-bit trap is acknowl- 
edged immediately after 
the RTI instruction. 


Same as 11/40 


Same as 11/40 


RTT Instruction 


Not implemented 


First instruction after 
RTT is guaranteed to 
be executed. 


Same as 11/40 


Same as 11/40 


Processor status odd 
byte at location 
777777 


Odd byte of PS can be 
addressed without a 
trap. 


Same as 11/05 


Same as 11/05 


Same as 11/05 



Table 2-8 Programming Differences (Cont) 





11/05 and 11/10 


11/35 and 11/40 


11/04 


11/34 


GENERAL REGISTERS (including PC and SP) (Cont) 


T-bit of PS 


T-bit can be loaded 
by direct address of 
PS or from console. 


Only RTI, RTT traps 
and interrupts can load 
the T-bit 


Same as 11/05 


Same as 1 1 /40 


Bus Errors 










PC contains odd 
address 


PC unincremented 


Same as 11/05 


Same as 11/05 


Same as 11/05 


PC contains an 
address in nonexist- 
ent memory 


PC incremented 


PC unincremented 


Same as 11/05 


Same as 11/40 


Register contains 
odd address and 
instruction mode 2 


Register unincremented 


Register incremented 


Same as 11/05 


Same as 11/05 except 
for MOV mode 2 and 
MTPI where the 
register will be incremented. 


Register contains 
address in nonexist- 
ent memory and 
instruction mode 2. 


Register incremented. 


Register incremented. 


Register unincremented 


Same as 1 1/04 except for 
MOV mode 2 destination 
and MTPI where the 
register will be incremented. 


Interrupt service 
routine. 


The first instruction 
will not be executed 
if another interrupt 
occurs at a higher 
priority. 


Same as 11/05 


Same as 11/05 


Same as 11/05 



Table 2-8 Programming Differences (Cont) 





11/05 and 11/10 


11/35 and 11/40 


11/04 


11/34 


GENERAL REGISTERS (including PC and SP) (Cont) 


Priority order of 
of traps and 
interrupts 


Odd address 
Time-out 
Halt instruction 
Trap instructions 
Trace trap 
Stack overflow 
Power fail 
Halt from console 


Halt instruction 

Odd address 

Stack overflow (red) 

Mem mgt error 

Time-out 

Parity 

Trap instruction 
Trace trap 

Stack overflow (yellow) 

Power fail 

Halt from console 


Halt instruction 
Bus error 
Trap instruction 
Trace trap 
Stack overflow 
Power fail 
Halt from console 
Interrupts 

Next instruction fetch 


Same as 11/40 
except no red 
zone stack over- 
flow 


MISCELLANEOUS 










Swab and V-bit 


V-bit is cleared. 


Same as 11/05 


Same as 11/05 


Same as 11/05 


Instruction set 


Basic set 


Basic set and Mark, 
RTT, SOB, SxT, XOR. 
EIS adds: MUL, DIV 
ASH, ASHC. 
FIS adds: FADD, 
FSUB, FMUL, FDIV. 
KT11-D adds: MTPI, 
MFPI. 


Basic set and RTT 


Basic set and Mark, 
RTT, SOB, SxT, XOR, 
MUL, DIV, ASH, 
ASHC, MTPI, MFPI, 
MTPS, MFPS. (MTPS 
and MFPS are new 
instructions used for 
LSI-11.) 


Memory management 
violation during a 
trap sequence 


Does not apply 


If a mem mgt viola- 
tion occurs between 
the first and second 
push down of the stack 
during a trap sequence, 
the status of the CPU 
before the violation is 
placed as the PS on the 
the Kernel stack. 


Does not apply 


If a mem mgt viola- 
tion occurs between 
the first and second 
push down of the stack 
during a trap sequence, 
the status of the vector 
+2 of the original trap 
is placed as the PS on 
the Kernel stack. 



CHAPTER 3 

CPU OPERATING SPECIFICATIONS 



Operating Temperature 
Relative Humidity 
Input Power 
Physical Size 
Interface Requirements 

Power and Ground Pinouts 

Number of Integrated 
Circuits 



5° to 50° C (41° to 122° F) 

20 to 95% (without condensation) 

+5 Vdc ±5% at 4.5 A (typical) per module (M7265 and M7266) 
Two hex modules (8-1/2 X 15 in.) 

All I/O signals are available on connectors A and B. These sig- 
nals are pin-compatible with modified Unibus pinout as shown 
in Table 3-1. The bus loading on each of these Unibus lines is 
equivalent to one bus load. 

+5 V: pins AA2, BA2, CA2, DA2, EA2, EA2 

GND: pins AC2, ATI, BC2, BT1, CC2, CT1, DC2, DTI, EC2, 
ET1, FC2, FT1 

231 (M7265 = 120; M7266 = 111) 
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Table 3-1 Standard and Modified Unibus Pin Assignments 





Standard 


Modified 




Standard 


Modified 




Standard 


Modified 


Pin 


Signal 


Signal 


Pin 


Signal 


Signal 


Pin 


Signal 


Signal 


A A 1 


TNIT I 


INIT L 


API 


GROUND 


PO* 


BH1 


A01 L 


A01 L 


A A? 


+S V 


+5 V 


AP2 


BBSY L 


BBSY L 


BH2 


A00 L 


A00 L 


API 


TNTR T 
I rs 1 rv Ju 


TNTR T 


AR 1 


GROUND 

VJlvVy yj 1>I JL/ 


RAT BACKUP + 1 S V 


RT1 


AO^ T 

rWJD X-/ 


AO'} T 


AR? 
ADZ 


(TROT TMD 


TF<sT POTNT 

1 JDO 1 JT 1 


AR? 


SACK T 


SACK T 

O/AV^Xv JL/ 


RT? 


AO? T 

rVUZ, X_/ 


AO? T 

AUZ, Lj 




nnn t 


nnn t 

JJUU JL/ 




(TROTTNn 


RAT RACK! TP +1 S V 


RK1 

JJIV 1 


AOS T 

rWJ~J Lj 


AOS T 

JrWJ +J Lj 


An 

AtZ 


vjivWUiNLv 




A<s? 


NPR T 

1>I1 JTV Lj 


NPR T 
i>rj\ JL/ 


RK? 


A04 T 

rx\J'-T JL/ 


A04 T 

rX\J*T Lj 


A Pi 1 

AJLU 


1AJZ JL 


nn? T 

\J\JL JL 


AT1 


HROT TNn 
Vjr tv W U lN I_y 


VjJ\U U J/N Xy 


RT 1 


A07 T 


A07 T 

/tlVJ / JL/ 


a no 


nm t 


nni t 

JL/Ul JL/ 


AT? 

A1Z 


RR7 T 


RR7 T 

Dxv / 1j 


RT ? 


ACI& T 

AUU JL/ 


AO^ T 

riUU Lj 


AF1 


nnA T 


nnj. t 

JL/UH- JL/ 


ATT1 


NPO H 


+?n v 

» Zv/ V 


RM1 

JLJ1VX 1 


A09 T 

xA.Vy 3^ JL/ 


A09 T 

£\\jy Lj 


AF? 
ALZ 




J-vUJ> JL/ 


ATI? 


RR6 T 

XJXXU JL/ 


BR6 L 


BM2 


A08 L 


A08 L 


AF1 




D06 T 


AVI 


BG7 H 


+20 V 


BN1 


All L 


All L 


AF? 


DOS T 

L/UJ Lj 


D05 L 


AV2 


GROUND 


+20 V 


BN2 


A10L 


A10 L 


AH1 


D08 T 


D08 L 


BA1 


BG6 H 


SPARE 


BP1 


A13 L 


A13 L 


AH? 


D07 T 


JL/Vy / JL/ 


BA2 


+5 V 


+5 V 


BP2 


A12 L 


A12 L 


AT1 


D10 T 

LJ L\J Lj 


D10 L 


BB1 


BG5 H 


SPARE 


BR1 


A15 L 


A15 L 


AT? 
/\ J z 


HOP T 

JL/U^ JL/ 


D09 T 


BB2 


GROUND 


TEST POINT 


BR2 


AH L 


AH L 




m ? t 


D1? T 

Lf iL L 


BC1 


BR5 L 


BR5 L 


BS1 


A17 L 


A17 L 


AK2 


Dll L 


Dll L 


BC2 


GROUND 


GROUND 


BS2 


A16L 


A16L 


AL1 


DHL 


DHL 


BD1 


GROUND 


BAT BACKUP +5 V 


BT1 


GROUND 


GROUND 


AL2 


D13L 


D13L 


BD2 


BR4L 


BR4L 


BT2 


CI L 


CI L 


AMI 


PAL 


PAL 


BE1 


GROUND 


INT SSYN* 


BUI 


SSYN L 


SSYN L 


AM2 


D15L 


D15L 


BE2 


BG4H 


PAR: DET* 


BU2 


COL 


COL 


AN1 


GROUND 


PI* 


BF1 


ACLOL 


ACLOL 


BV1 


MSYNL 


MSYNL 


AN2 


PBL 


PBL 


BF2 


DCLOL 


DCLOL 


BV2 


GROUND 


-5V 



*Pins used by parity control module. 



CHAPTER 4 

DETAILED HARDWARE DESCRIPTION 



4.1 INTRODUCTION 

The following paragraphs contain a detailed circuit description of the KD11-E Central Processing 
Unit (CPU), which is used in the PDP-1 1 /34 Computer. Segments of the CPU, shown in Figure 4-1, 
are analyzed separately, using the block diagrams contained in this manual and the KD11-E circuit 
schematics. 

4.2 DATAPATH 

4.2.1 General Description 

The simplified KD11-E data path consists of six function units, as shown in Figure 4-2. Circuit sche- 
matics Kl-1 through Kl-4 (D-CS-M 7265-0-1) each contain one 4-bit slice of the data path. Table 4-1 
briefly describes the function of each of the six function units. 

Data flow through the data path is controlled, directly or indirectly, by the Control Store circuitry on 
the control module (M7266). Each Control Store ROM location (microinstruction) generates a unique 
set of outputs capable of controlling the data path elements and determining the ALU function to be 
performed. Sequences of these ROM microinstructions are combined into microroutines, which per- 
form the various PDP-11 instruction operations. 



4-1 



I 



I.R. 
(K2-5) 



9- 



CONT 
STOR 

(K2-8 


ROL 
E ROM 

,K2-9) 






CONl 
STC 
REGIi 
(K2-8 


"ROL 
)RE 
BTER 
,K2-9) 



-LOAD I.R. 



I.R. 




AUX ALU 


DECODE 




CONTROL 


(K2-6) 




(K2-5) 






t 








M-BRANCH 




BUT 


CONTROL 




DECODE 


(K2-6) 




(K2-3.K2-7) 



ALU 

OJS(3:0) 



CLOCK 
(K1-5) 

i r 

PROC REG 
CLK CLK 



BUS 
CONTROL 

(K2-1.K2-2) 



D/R 



I I CONTROL 



J^j SIGNALS 



C 



B MODE (HO) 



B MODE (TO) 



BX 
REQ 

(KH-K1-4) 




B 

REG 

(K1-1-K1-4) 





CC DATA I l 1 " 



AUX 

CONTROL 



+16 



PSW MUX 




B MUX 






SPM 


(K1-1, K1-4) 




(K1-1-K1-4) 






(KM-K1-4) 
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Figure 4-1 KD11-E Block Diagram 
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Table 4-1 Function Units of the KD11-E Data Path 



Unit 


Function 


Arithmetic Logic Unit (ALU) 


The heart of the data path is the ALU, which is the logic ele- 
ment that manipulates the data. It is capable of performing 16 
arithmetic or 16 logic (Boolean) operations on two 16-bit oper- 
ands to produce a 1 6-bit result. The A input comes from either 
the scratchpad memory or the memory management system; the 
B input comes from the B leg. The ALU output is sent to the 
AMUX. 


ALU Multiplexer (AMUX) 


The AMUX is a 4-to-l multiplexer that controls the 
introduction of new data and the circulation of available data 
through the data path. Input to the AMUX is both external 
(from the Unibus data lines) and internal (from the ALU, PSW, 
or constants). The AMUX output is sent to the SSMUX. 


Processor Status Word Register 
(PSW) 


The PSW register is a 12-bit register that contains information 
on the current processor priority, condition codes (C, V, Z, and 
N) which indicate the results of the last instruction, a "trap" bit 
(TBIT) which causes automatic traps after each fetch instruc- 
tion used during program debugging, and both the current and 
previous memory management modes (Kernel or User). PSW 
input comes from the SSMUX or from condition code logic; 
PSW output is sent to the AMUX. 


Swap Sign Extend Multiplexer 
(SSMUX) 


This multiplexer controls the form in which data is output from, 
or recirculated into, the data path. The SSMUX can pass the 
data unchanged, swap the high and low bytes, sign-extend the 
low byte into the entire word, or simultaneously swap high and 
low bytes while sign-extending the high byte (which becomes the 
new low byte) into the entire word. SSMUX input comes from 
the AMUX. SSMUX output goes to either the rest of the com- 
puter system (via the Unibus), the other sections of the proces- 
sor (the control section, via the Instruction register, and the 
memory management system), or to other portions of the data 
path (the PSW, the B leg, and the scratchpad memory). 


BLeg 


The B leg of the ALU consists of two 16-bit registers (B and BX) 
and a 4-to-l multiplexer (BMUX). Both registers can shift left 
or right independently, or together they can perform full 32-bit 
shifts. The BMUX selects one of the four functions (BREG, 
BXREG, +1, +16) and connects to the B input of the ALU. 
The B leg is used to store operands for the ALU, to implement 
rotate and shift instructions, and to implement Extended 
Instruction Set (EIS) instructions. B leg input comes from the 
SSMUX. B leg output goes to the B input of the ALU. 
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Table 4-1 Function Units of the KD11-E Data Path (Cont) 



Unit 


Function 


Scratchpad Memory (SPM) 


This random access memory can store sixteen 16-bit words in 
eight processor-dedicated registers and eight general-purpose 
(user available) registers. One of the general-purpose registers is 
used as a stack pointer, another as the program counter. Input 
to the scratchpad memory is from the SSMUX. Output, which 
can be buffered and latched to enable reading from one address 
and modifying another during the same cycle, goes to the A 
input of the ALU and to the Virtual and Physical Bus Address 
registers. 



4.2.2 Arithmetic Logic Unit (ALU) 

The ALU (Figure 4-3) is divided into four 4-bit slices (Kl-1, Kl-2, Kl-3, and Kl-4 each contain a 
slice), with each slice consisting of one 4-bit ALU chip (74S181) and part of a Look- Ahead Carry 
Generator chip (74S 182). 

ALU Inputs 

The A input to each ALU chip comes from one of the scratchpad memory (SPM) registers or from the 
KTMUX, as specified by the Control Store microinstruction being performed. (Refer to Paragraph 

4.2.3 for details.) The B input comes from the B leg multiplexer (BMUX) logic, and can take the form 
of the B register contents, the BX register contents, a constant 0, a constant 1, or a constant 16. (Refer 
to Paragraph 4.2.4 for details.) 



4-5 



K2-8 ALU CIN L - 



C IN 



G 0 



LOOK AHEAD CARRY GENERATOR 

C G t P t C 



G 2 P 2 



-OUT 



A LEG 
(FROM SPM OR 
MEMORY 
MANAGEMENT) 



BITS 0-15 



B LEG 



V 



A C IN 6 



(KM) 
ALU F 
M 



G P 
(K1-2) 

ALU F 
M 



G P 
(K1-3) 

ALU F 
M 



BITS 0-15 



ALU S0-S3 
(FROM K2-8)~ 



K2-8 ALU MODE H- 



I 



V 



c 


G P 


A 


(K1-4) 




ALU F 


B 




S 


M 



K1-4 
ALU 
COUT H 



BITS 0-15 



SPECIFIES 
ALU FUNCTION 



SPECIFIES 
ALU MODE 
"(ARITHMETIC 
OR LOGICAL) 



TO AMUX 



J 



11-3877 



Figure 4-3 ALU Block Diagram 



ALU Functions 

The function performed by the ALU is controlled by the four Selection bits (S3, S2, SI, SO), the Mode 
bit (M), and the Carry-In bit (CIN). Table 4-2 lists the ALU functions of the KD11-E and the corre- 
sponding bit patterns for the six control signals. 



Table 4-2 ALU Functions and Control Signals 



ALU Function 


ALU Con< 


trol Signals 






131 


en 




VI 


ZERO 


0 


0 


1 


1 


0 


1 


A 


0 


0 


0 


0 


0 


1 


A plus 1 


0 


0 


0 


0 


0 


0 


A minus 1 


1 


1 


1 


1 


1 


0 


A minus B 


0 


1 


1 


0 


0 


0 


A 


1 


1 


1 


1 


0 


1 


B 


1 


0 


1 


0 


0 


1 


A plus B 


1 


0 


0 


1 


1 


0 


A-B 


1 


0 


1 


1 


0 


1 


A-B 


0 


0 


1 


0 


0 


1 


A plus B plus 1 


1 


0 


0 


0 


0 


0 


A plus A 


1 


1 


0 


0 


1 


0 


B 


0 


1 


0 


1 


0 


1 


A plus A plus 1 


1 


1 


0 


0 


0 


0 


A©B 


0 


1 


1 


0 


0 


1 



4.2,3 Scratchpad 

The scratchpad consists of a random access memory that can store sixteen 16-bit words, and can be 
used for various functions. Scratchpad operation is divided into four 4-bit slices, with Kl-1, Kl-2, Kl- 
3, and Kl-4 (D-CS-M7265-0-1) each containing one slice. The scratchpad address multiplexer circuitry 
is shown on K2-4. 

Data Input 

Data to be written into the scratchpad is channeled from the SSMUX and clocked into the scratchpad 
registers. 

Addressing the Scratchpad 

The address of the scratchpad memory register to be accessed is generated by the scratchpad address 
multiplexer (SPAM), located on the control module (K2-4). Depending on the state of the select lines 
to the SPAM, the source of the address can be any of the following: 

1. The Control Store ROM (ROMSPA03:ROMSPA00). 

2. Instruction Register Source Field (IR08:IR06) 

3. Instruction Register Destination Field (IR02:IR00) 

4. Bus Address (PBA03:00) 
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Reading from the Scratchpad 

If the Control Store circuitry forces a low on the Kl-10 ENAB GR L line at the beginning of a 
machine cycle, the tristate outputs of the scratchpad will be enabled. Ninety or 120 nanoseconds after 
the cycle begins (allows the scratchpad address to set up), Kl-5 TAP 30 H goes low, allowing data 
stored in the selected scratchpad register to be latched in the output buffer SP15:SP00 lines. This data 
will continue to be read during the rest of the machine cycle. (See Figure 4-4.) Table 4-3 shows the 
various scratchpad enabling configurations and the modes they select. 
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Figure 4-4 Scratchpad Timing 



Table 4-3 Scratchpad Enabling Configurations and Modes 



OD 


WE 


CLK 


OS Mode 


Outputs 


L 


X 


X 


L OUTPUT STORE 


Data from last addressed location 


X 


L 




X WRITE DATA 


Data being written (if OD = L and OS = H) 


L 


X 


X 


H READ DATA 


Data stored in addressed location 


H 


X 


X 


L OUTPUT STORE 


High-impedance state 


H 


X 


X 


H OUTPUT DISABLE 


High-impedance state 
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Latching of Outputs 

When the OD (pin 12) and OS (pin 13) inputs are both low, the data being read from the scratchpad 
that is addressed is latched into the buffers on the output of scratchpad memory (SP15-00). Once those 
outputs are stabilized, they are not affected by any modifications to the scratchpad memory address 
lines for the remainder of the cycle. 

Clocking the Scratchpad 

The REG CLK H clock signal clocks data from the SSMUX lines into the scratchpad register and 
writes that data into scratchpad memory. TAP 30 H unasserted, placing a high at the OS input (pin 13) 
of the scratchpad, is all that is required for a read operation. Both a read and a write can take place 
during the same machine cycle. Figure 4-4 shows the scratchpad timing for one machine cycle. 

Scratchpad Address Multiplexer (SPAM) 

The SPAM (Figure 4-5) generates the four address signals that select the desired scratchpad register, or 
word. The SPAM (shown in print K2-4 of D-CS-M7266-0-1) consists of two 74S153 dual 4-line-to-l- 
line data multiplexers, or a total of four 4-to-l multiplexers, all with a common strobe input signal 
(GND) and common address input signals (SI and SO). Four data input sources are connected so that, 
when the SPAM is addressed and strobed, it generates one 4-bit output, selected from one of the four 
sources. Table 4-4 lists the sources of SPAM input data and the address input signal configurations 
that select them. 
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Figure 4-5 Scratchpad Address Multiplexer (SPAM) 
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Table 4-4 SPAM Input Data Sources 
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Scratchpad Memory Organization 

The scratchpad memory (SPM) is a 16- word-by- 16-bit random access read/write memory composed 
of four 16-word-by-4-bit bipolar (85S68) memory units (Kl-1 through Kl-4). The 16- word-by- 16-bit 
organization of this memory provides 16 storage registers that are utilized as shown in Table 4-5. 



Table 4-5 SPM Register Utilization 



Register 
Number 


Description 


R0 ] 
Rl 






R2 
R3 




General-Purpose Registers 


R4 
R5 J 






R6 


(Processor Stack Pointer) 


R7 


(Program Counter) 


R10 


Temporary Storage 


Rll 


Unused 


R12 


Temporary Storage 


R13 


Temporary Storage 


R14 


Unused 


R15 


Temporary Storage 


R16 


Processor Stack Pointer 

(Memory Management User Mode) 


R17 


Temporary Storage 
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Scratchpad Outputs 

Data outputs from the scratchpad are fed to the ALU as the A leg input and to the memory manage- 
ment system. 

4.2.4 B Leg 

The B leg (Figure 4-6) of the ALU consists of three components: the B register, the BX register, and the 
B leg multiplexer (BMUX). Each of these components is divided into four 4-bit slices, with circuit 
schematic prints Kl-1, Kl-2, Kl-3, and Kl-4 each containing a slice. Data from the SSMUX can be 
clocked into either register. Register contents can be shifted either individually as 16-bit words or 
together as a double (32-bit) word. 
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Figure 4-6 B Leg Block Diagram 
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B Register 

The B register (B REG) is a general-purpose storage register (Figure 4-7) on the B leg of the ALU, 
consisting of four 4-bit bidirectional universal shift registers (74194). The mode control lines of the 
four 4-bit registers are connected in parallel, so that the signals K2-8 B MODE 00 L and K2-8 B 
MODE 01 L select the function that will be performed by the B register when clocked by Kl-5 PROC 
CLK L. Table 4-6 shows the various functions and the shift configurations that select them. 
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Figure 4-7 BREG Block Diagram 
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Table 4-6 B and BX Register Enabling Configurations and Modes 



Mode 
01 


Mode 
00 




Function (when PROC CLK L goes high) 


L 


L 


Hold 


Contents of register do not change. 


L 


H 


Shift Right 


Contents are shifted right one bit. 


H 


L 


Shift Left 


Contents are shifted left one bit. 


H 


H 


Parallel Load 


Data from SSMUX is loaded into B register 
and appears at output. 



The B register can be shifted as an 8-bit byte or a 16-bit word. The signal Kl-10 SHIFT IN B deter- 
mines what is shifted into the B register. When the contents of this register and the BX register are 
combined into a 32-bit word, the B register contains the upper 16 bits. 

BX Register 

The BX register (BX REG) is a general-purpose storage register (Figure 4-8) on the B leg of the ALU, 
consisting of four 4-bit bidirectional universal shift registers (74194), similar to the B register. The 
mode control lines of the four 4-bit registers are connected in parallel, so that the signals K2-8 BX 
MODE 00 L and K2-8 BX MODE 01 L select the function to be performed when the BX REG is 
clocked by Kl-5 PROC CLK L. The BX register can be shifted as a 16-bit word or, in conjunction with 
the B register, as a 32-bit word. In the latter case, the BX register contains the lower 16 bits of the 32- 
bit word, and the shift right (SR) input of the most significant register in the BX register is connected 
to the zero bit of the B register. Table 4-6 shows the various functions and the shift configurations of 
K2-8 BX MODE 00 L and K2-8 BX MODE 01 L that select them. 

B Leg Multiplexer (BMUX) 

The BMUX (Figure 4-9) consists of three 2-to-l 1 multiplexers and a 4-to-l multiplexer, and is used to 
select the proper input to be used as an operand on the B leg of the ALU. The BMUX can select the 
contents of either the B REG or BX REG, or can act as a constant generator (constants 16, 1, or 0), 
depending on the configuration of signals K2-8 B LEG 00 H and B LEG 01 H (Table 4-7) and the state 
of K2-4 DISAB MSYN +1 L. 
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Figure 4-8 BX REG Block Diagram 
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Figure 4-9 BMUX Block Diagram 



4-15 



Table 4-7 BMUX Enabling Configurations and Modes 



BLeg 
01 


BLeg 
00 


Function 


Description 


L 


L 


BREG 


Passes data from the B register to the BMUX out- 
puts. This is the most common configuration. 


L 


H 


BX REG 


Passes data from the BX register to the BMUX 
outputs. This is used principally for EIS 
instructions. 


H 


L 


+ 16 


Forces the constant +16 into the BMUX outputs 
to preset a counter that is used for EIS instructions. 


H 


H 


+ 1 
0 


Forces the constant +1 into the BMUX outputs 
during operations in which the contents of a regis- 
ter are being incremented or decremented by two. 

By asserting DISABLE MSYN +1 L, this con- 
figuration forces the constant 0 into the BMUX 
outputs during operations in which the contents of 
a register are being incremented or decremented by 
one. (The signal K2-8 ALU CIN L to the ALU 
from the control module provides the one.) 



B Leg Shift Capabilities 

Each of the four shift registers (74194) that make up each register (B REG and BX REG) has the 
capability of being shifted left or right, as indicated in Table 4-6 and Figure 4-10. The B register can be 
shifted as an 8-bit byte or a 16-bit word; the BX register can be shifted as a 16-bit word or, in con- 
junction with the B register, as a 32-bit word. 

Byte Shifts 

If the mode control lines (K2-8 B MODE 00 L and K2-8 B MODE 01 L) specify a shift left, B REG 
15:00 are shifted one position toward the most significant bit at the clock pulse Kl-5 PROC CLK L 
going high. The signal Kl-10 SHIFT IN B H is shifted into bit 00 via the SL input. This signal is 
generated by the SHIFT MUX (El 17 on print Kl-10) as a function of the select signals K2-8 SHIFT 
MUX 01 L and K2-8 SHIFT MUX 00 L. The shift right input to B REG bits 07:04 comes from the 
BYTE MUX (E106 on print Kl-10). Assertion of K2-5 BYTE L (indicating a byte instruction) causes 
bit 07 of the B REG to be loaded directly by K2-5 SERIAL SHIFT H; if K2-5 BYTE L is high, 
however, B REG bit 07 is loaded from B REG 08. B REG bit 15 is loaded from Kl-10 SHIFT IN B H 
during a shift right (just as B REG bit 00 is loaded during a shift left), and can be loaded with itself, 
K2-5 SERIAL SHIFT H, ground, or BX REG bit 15, depending on the SHIFT MUX. For a shift 
right, BX REG bits 15:01 are shifted one position toward the least significant bit, and BX REG bit 15 
is loaded with B REG bit 00. Thus, for all right shifts, the BX REG acts as the low-order 16 bits of a 
32-bit word made up of B REG and BX REG. For a shift left, BX REG bits 15:00 are shifted one bit 
position toward the most significant bit. BX REG bit 00 is loaded with the signal Kl-10 SHIFT IN BX 
H, which is generated by the SHIFT MUX. Depending on the configuration of the SHIFT MUX 
control lines K2-8 SHIFT MUX 00 L and K2-8 SHIFT MUX 01 L, the BX REG may be loaded with 
any of four possible inputs: Kl-4 ALU COUT H, the output of the EIS overflow detection logic (E98 
on print Kl-10), ONE, and ZERO. 
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Figure 4-10 B Leg Shift Logic 



4-17 



Specific Shift and Rotate Operations 

The shifting requirements for the ASL, ASR, ROL, ROR, ASH, and ASHC instructions are described 
briefly below. 

1 . Arithmetic Shift Left (ASL) - Shifts all bits of the destination left one place. The low-order 
bit is loaded with a 0. The C-bit of the status word is loaded from the high-order bit of the 
destination. ASL performs a signed multiplication of the destination by 2, with overflow 
indication. 

2. Arithmetic Shift Right (ASR) - Shifts all bits of the destination right one place. The high- 
order bit is duplicated. The C-bit is loaded from the low-order bit of the destination. ASR 
performs signed division of the destination by two. 

3. Rotate Left (ROL or ROLB, depending on whether a word or byte operation) - Rotates all 
bits of the destination left one place. The high-order bit is loaded into the C-bit of the status 
word, and the previous contents of the C-bit are loaded into the low-order bit of the 
destination. 

4. Rotate Right (ROR or RORB) - Rotates all bits of the destination right one place. The low- 
order bit is loaded into the C-bit, and the previous contents of the C-bit are loaded into the 
high-order bit of the destination. 

5. Arithmetic Shift (ASH) - Shifts the contents of the register right or left the number of times 
specified by the source operand. The shift count is taken as the low-order six bits of the 
source operand. This number ranges from -32 to +31. Negative is a right shift and positive 
is a left shift. 

6. Arithmetic Shift Combined (ASHC) - Treats the contents of the register and the register 
ORed with one as one 32-bit word. Rvl (bits 15:00) and R(bits 31:16) are shifted right or left 
the number of times specified by the shift count. The shift count is taken as the low-order six 
bits of the source operand. This number ranges from -32 to +31. Negative is a right shift 
and positive is a left shift. (When the register chosen is an odd number, the register and the 
register ORed with one are the same. In this case, the right shift becomes a rotate. The 16-bit 
word is rotated right the number of bits specified by the shift count.) 

NOTE 

When R is an even-numbered register, Rvl will be 
the next highest register. If R is an odd-numbered 
register, Rvl will be the same register (e.g., if R = 
R4, then Rvl = R5; if R = R5, then Rvl = R5). 
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BMUX Operation 

Three 2-to-l multiplexers (74157s) are used to switch B leg bits 15:04. Their select lines are tied in 
parallel with each other and with the SO line of the 4-to-l multiplexer (two 74153s) used to switch B leg 
bits 03:00. The SO line is signal K2-8 B LEG 00 H. Signal K2-8 B LEG 01 H is connected to the enable 
lines of the 2-to-l multiplexers and to the SI line of the 4-to-l multiplexer. Table 4-7 describes the 
enabling configurations and modes for these two select signals, which are logically determined as 
follows: 

1 . If both K2-8 B LEG 00 H and K2-8 B LEG 01 H are low, the 4-to-l multiplexer (E8 and E5 
on print Kl-1) selects the A input and the 2-to-l multiplexers (E28 on print Kl-2, El 8 on 
Kl-3, and E38 on Kl-4) select the A inputs; the data from the B REG is switched to the 
BMUX output. 

2. If K2-8 B LEG 01 H is low and K2-8 B LEG 00 H is high, the 4-to-l multiplexer selects 
input B, the 2-to-l multiplexers remain enabled, and the data from the BX REG is switched 
to the BMUX output. 

3. If K2-8 B LEG 01 H is high and K2-8 B LEG 00 H is low, the 2-to-l multiplexers are not 
enabled. The 4-to-l multiplexer selects input C, where bit 0 is low and bits 03:01 are con- 
nected to K2-8 AUX CONTROL (1) L unasserted, generating a + 16 constant to the B leg. 

4. If both K2-8 B LEG 01 H and K2-8 B LEG 00 H are high, the 2-to-l multiplexers are still 
disabled and the 4-to-l multiplexer selects input D, where bits 03:01 are grounded and bit 00 
is connected to K2-4 DISABLE MSYN +1 L unasserted, generating a constant of + 1 to the 
B leg. 

5. If, in 4 above, K2-4 DISABLE MSYN + 1 L is asserted, a constant of 0 is generated to the B 
leg. 

Constants +16, +1, and 0 

The purpose of generating the constants + 1 and 0 on the B leg input of the ALU is to aid the processor 
to perform autoincrement and autodecrement operations. During either operation, if a word instruc- 
tion is being performed, the specified register is incremented or decremented by two; if a byte instruc- 
tion is being performed, the register is incremented or decremented only by one. The actual ALU 
operation is: 

RESULT = A LEG DATA + B LEG DATA + ALU CIN. 

The ALU always uses the K2-8 ALU CIN L signal to increment or decrement the A leg input by one; 
thus, the B leg input must provide the constant +1 or 0 to obtain the correct autoincrement or auto- 
decrement result for both byte and word instructions. A B leg constant of + 1 is generated by enabling 
the least significant bit of the BMUX output (bit 00) and forcing all other bits (15:01) to 0. To generate 
a constant 0, even bit 00 is cleared. The actual constant generated is defined by the state of the K2-4 
DISABLE MSYN +1 L signal, which is determined by the Control Store. 
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4.2.5 ALU Multiplexer (AMUX) 

The AMUX (Figure 4-11) consists of three 4-to-l multiplexers (74S153s) and one 2-to-l multiplexer 
(74S157), each one dedicated to a 4-bit slice of the AMUX. The 2-to-l multiplexer (El 4 on print Kl-3) 
switches AMUX bits 1 1:08 according to the state of the STB and SO inputs. If the STB input is high, 
the multiplexer is disabled, and the output is forced low. If the STB input is low, the multiplexer is 
enabled, and the output depends on the state of the SO input and the appropriate data input. Thus, if 
the SO input is low, the A data input will be gated through to the AMUX output; if the SO input is high, 
the B data input will be gated through. Because the 4-to-l multiplexer does not have an enable input, 
the output always follows one of the inputs, corresponding to the binary value of select lines SI and SO 
(Kl-10 AMUX SI H and Kl-10 AMUX SO H, respectively), as follows: 

1. Unibus Data Function - If both SI and SO are low (binary 0), the 4-to-l multiplexers select 
input A and the 2-to-l multiplexer selects input A. Thus, each 4-bit slice of the AMUX 
switches Unibus data into the data path. 

2. Constant's Function - Certain operations require the introduction of specific numbers into 
the data path. (For example, the data path must generate a vector of 24 for a power-fail trap, 
or 1 14 for a parity trap.) Access to these and other numbers is facilitated by storing certain 
constants in a read-only memory and presenting them to the constant's input of the AMUX. 
If SI is low and SO is high (binary 1), the 4-to-l multiplexers select input B (the constant's 
input). Bits 11:08, which are controlled by the 2-to-l multiplexer, are not used. 

3. ALU Input - If SI is high and SO is low (binary 2), the 4-to-l multiplexers select ALU inputs 
(input C) and the 2-to-l multiplexer is enabled, also selecting ALU inputs, so that the ALU 
lines are selected for all 16 bits. 

4. PSW Inputs - If both SI and SO are high (binary 3), the 4-to-l multiplexers select the PSW 
input (input D). The 2-to-l multiplexer is disabled, as bits 11:08 are not used. 

4.2.6 Processor Status Word 

The Processor Status Word (PSW) register contains information on the current and previous memory 
management mode, the current processor priority, a processor trap for debugging, and the condition 
code results of the previous operation. The PSW bit assignments and uses are shown in Table 4-8. 
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Table 4-8 Processor Status Word Register Bit Assignments 



PSW Bit 


Name 


Use 


15:14 


Memory Management 
v^urreni lvioue 


Contain the current memory management modes. 


13:12 


Memory Management 
rrevious Moae 


Contain the previous memory management modes. 


11:08 


Unused 




07:05 


Priority 


Set the processor priority. 


U4 


Trace 


When this bit is set, the processor traps to the trace 
vector. Used for program debugging. 




XT 

IN 


Set when the result of the last data manipulation is 
negative. 


02 


z 


Set when the result of the last data manipulation is 
zero. 


01 


V 


Set when the result of the last data manipulation 
produces an overflow. 


00 


c 


Set when the result of the last data manipulation 
produces a carry from the most significant bit. 



The PSW (Figure 4-12) is a 12-bit register composed of three quad D-type flip-flops (74175s) and one 
separate D-type latch. The first of these (E95 on print Kl-1) stores the condition code bits (N, Z, V, 
and C), and derives its input from the PSW MUX, a quad 2-line-to-l-line multiplexer (E96 on Kl-1) 
according to the state of the SO select line. When high, SO selects the B inputs (SSMUX bits 03:00); 
when low, SO selects the A inputs, which come from the condition code logic (print Kl-10). The 
selected inputs are passed to the f-outputs of the multiplexer and into the PSW. 

A second quad D-type flip-flop (E97 on Kl-2) is used to store the three KD11-E processor priority 
bits, which it obtains from SSMUX bits 07:05. A separate 74S74 (E107 on Kl-2) is needed to store the 
Trace Trap flag (T-bit), which can be loaded from the Kl-2 SSMUX 04 H line. 

The third quad D-type flip-flop (E80 on Kl-4) stores the bits containing the current and previous 
status of the memory management mode. SSMUX bits 15 and 14 provide the input for PSW bits 15 
and 14, which are then rerouted through a quad 2-line-to-l-line multiplexer (E90 on Kl-4) and multi- 
plexed with SSMUX bits 13 and 12 according to the state of the SO select signal [K2-9 FORCE 
KERNEL (1) H] to provide the input for PSW bits 13 and 12. Thus, PSW bits 15 and 14 reflect the 
current status of the memory management mode, while PSW bits 13 and 12 indicate the previous 
status. 

All flip-flops in the PSW are clocked, directly or indirectly, by clocking signal Kl-5 REG CLK L. All 
of the enabling signals come from the Control Store. 
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Figure 4-12 Processor Status Word 
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4.3 CONDITION CODES 

The logic necessary for determining the condition codes is shown on sheets Kl-10 and K2-5, and can 
be subdivided into three parts, each of which is discussed in some detail in this section. Constraints for 
each condition code bit are shown in the instruction set specifications (Chapter 2). 

4.3.1 Instruction Categorizing ROM 

The Categorizing ROM (E67 on sheet K2-5) decodes the instructions in the IR and categorizes them 
into eight groups, based on their effect on the carry and overflow condition codes. These groups are as 
follows: 



Group 


Instructions 


1 


MOV, BIT, BIS, BIC, and non-PDP-1 1 instructions 


2 


INC, DEC 


3 


CLR, TST, SWAB 


4 


ADD, ADC 


5 


NEG, CMP, COM 


6 


SUB, SBC 


7 


Rotate instructions 


8 


Unused 



Three of the four outputs of the Categorizing ROM are used to provide a binary representation of one 
of the above instruction categories for the C and V Decode ROM (E105 on Kl-10). The fourth output 
(K2-5 BYTE L) decodes the fact that the instruction in the IR is a byte instruction and is fed to the 
select input of the BYTE MUX (E106 on Kl-10). 

4.3.2 Byte Multiplexer (BYTE MUX) 

The BYTE MUX (E106 on Kl-10) is a quad 2-line-to-l-line multiplexer (74S157) that determines the 
N condition code bit and the Kl-10 SHIFT IN 07 H signal for the B REG (Figure 4-13). A single select 
input (K2-5 BYTE L) selects the A inputs when a byte operation is performed, and the B inputs when 
the operation is not a byte. 
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Output signal Kl-10 CC N H assumes the level of Kl-4 ALU 15 H when the instruction being per- 
formed is a word operation, and the level of K 1-2 ALU 07 H when the instruction is a byte operation. 
Byte operations may be performed on either the high or low bytes of the input word, depending on 
whether the processor microcode has already swapped bytes before the condition codes are detected. 

Fpr shift right operations, the Kl-10 SHIFT IN 07 H output assumes the level of the Kl-3 BREG 08 
(1) H input when a word instruction is performed, and the level of the K2-5 SERIAL SHIFT H output 
of the ROT/SHFT ROM (E61 on print K2-5) for a byte operation. The diagrams in Figure 4-14 
indicate the operations performed by various instructions. 

4.3.3 C and V Decode ROM 

The C and V Decode ROM (E105 on Kl-10) determines the values of the carry and overflow condition 
code bits as a function of the instruction being performed (Figure 4-15). Inputs to this ROM come 
from the ROT SHIFT ROM (E61 on K2-5), the PSW [Kl-1 CBIT (1) H], the BYTE MUX, and the 
Categorizing ROM (E67 on K2-5). Outputs Kl-10 CC V H and Kl-10 CC C H are fed via the PSW 
MUX (E96 on Kl-1) to the PSW register. 

4.3.4 Condition Code Signal CC Z H 

Each 4-bit slice of the data path contains an ALU output via a gate (type 8815) reflecting whether all 
four of the bits in that slice are ZERO. If the instruction being performed is a byte operation, condition 
code signal Kl-10 CC Z H assumes the combined state of signals Kl-1 0-3=0 H and Kl-2 4-7 = 0 H; 
for a word operation, Kl-10 CC Z H assumes the combined state of those signals together with Kl-3 
8-1 1=0 H and Kl-4 12-15=0 H. Thus, Kl-10 CC Z H is asserted if bits 00 through 07 = 0 for a byte 
operation and if bits 00 through 15 = 0 for a word operation. Assertion of K2-5 BYTE L selects byte 
operation. 

4.4 UNIBUS ADDRESS AND DATA INTERFACE 

4.4.1 Unibus Drivers and Receivers 

Standard bus transceiver circuits (type 8641) are used to interface the processor data path to the 
Unibus address (BUS A00:A15) and data (BUS D00:D15) lines. These circuits are shown on prints 
Kl-1 through Kl-4, and on Kl-6. Figure 4-16 shows the logic diagram for an 8641. 

4.4.2 Unibus Address Generation Circuitry 

A unique feature of the KD11-E is that KT11-D equivalent memory management capability is built 
into the 2-board processor. During Unibus transfers, virtual bus addresses are obtained from the 
scratchpad memory (SPM) and the Physical Bus Address (PBA) register, if relocation is not enabled, 
and latched in the Virtual Bus Address (VBA) register shown on print Kl-6. Figure 4-17 shows the 
actual VBA clock timing, while Figure 4-18 shows Unibus address logic in block diagram form. 

If the memory management circuit is not enabled (Kl-8 RELOCATE H is not asserted), the address 
that was clocked into the Physical Bus Address register is used as address data for the 8641 transceivers 
and driven onto the Unibus address lines. 

When the memory management circuit is enabled (Kl-8 RELOCATE H asserted), a selected reloca- 
tion constant (detailed description in Paragraph 4.12) is added to the contents of the VBA before it is 
latched into the BA and driven onto the Unibus. 



4-25 



ROR 
RORB 



WORD: 



3° 



ROL 
ROLB 



1 1 1 1 . , 1 


15' 




C 




8 











I 1 I I I I I 



c 




1 i i 1 i i 1 i i 1 i i ! i i 




15 


to 



ASR 
ASRB 



ODD 
I I I 1 



8 7 



J 1 L 



WORD: 



Of 



i n i 



EVEN , 

1 I I L 



"0 



J I I I I I L 



J I I L 



i , ■ i 



i i i i i 



ODD ADDRESS 8 



Or 



J I I I I I L 



EVEN ADDRESS 0 



ASL 
ASLB 



J I I L 



J L 



BYTE: 



I i i I 



J I I I L 



*-0 



15 ODD ADDRESS 8 



J I I I I I L 



7 EVEN ADDRESS 0 

n- 



Figure 4-14 Rotate Instructions 



4-26 



+5V 



K2-5 IR 15 (1) H- 
K2-5 IR14 (1) H- 
K2-5IR 13 (1) H- 
K2-5IR12 (1) H- 
K2-5 IR 10 (1) H • 
K2-5 IR09 (1) H 
K2-5 IR 08 (1) H 
K2-5 IR 07 (1) H 
K2-5 IR 06 (1) H 



K2-6 IR DECODE (1) L- 



(K2-5) 



CATEGORIZING 
ROM 



E67 



r> 



-K2-5 BYTE H 



K2-5 CC CODE 02 H 
K2-5 CC CODE 01 H 



K2-5 CC CODE 00 H 



FROM 

BYTE MUX 



K2-5 ROT CBIT(1)H- 
K1-1 CBIT (1) H- 



-K2-5 BYTE L 



(K1-10) 



C + V 
DECODE 
ROM 



E105 



•K1-10 CC V H 



— K1-10 CC C H 



11-3889 



Figure 4-15 C and R Decode ROM 



> 



UNIB 


us 


LINES 














>- 







11-3891 



Figure 4-16 Unibus Transceiver 
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4.4.3 Internal Address Decoder 

The receiver half of the bus transceivers continually monitors the Unibus address lines. If the processor 
is running (HALT RQST L or BUS SACK L are not asserted), these transceivers allow the Internal 
Address Decoder circuit (print K 1-10) to detect transfers to or from the PSW and memory manage- 
ment registers. Note, however, that the CPU does not allow access to its general registers through their 
Unibus addresses while it is running. 

While the processor is halted (BUS SACK L is asserted), this decoder circuit enables data transfers 
between CPU registers and Unibus peripheral devices. A list of these CPU registers and their Unibus 
addresses is shown below; the registers are discussed in Paragraph 4.12. 
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4.5 INSTRUCTION DECODING 
4.5.1 General Description 

Two methods are used to control instruction decoding, one using microroutine selection and the other 
using auxiliary ALU control. Dual control is required because of the large number of instructions that 
require source/destination calculations. Auxiliary ALU control is evoked whenever the microcode 
executes the action X = Y OP B as a result of a specific instruction. 

There are two prerequisites to a thorough understanding of the instruction decoding procedure. One is 
a knowledge of the microbranching process, and the other is a knowledge of the PDP-11 instruction 

format. 

The following facts pertain to the KD11-E/PDP-11 instruction set: 

1. In general, the PDP-11 operation code is variable from 4 to 16 bits. 

2. A number of instructions require two address calculations; an even larger number require 
only one address calculation. There are also a number of instructions that require address 
calculations, but do not operate on data. 

3. All op codes that are not implemented in the KD11-E processor must be trapped. 

4. There are illegal combinations of instructions and address modes that must be trapped. 

5. There exists a list of exceptions in the execution of instructions having to do with both the 
treatment of data and the setting of condition codes in the processor status word. 
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4.5.2 Instruction Register 

Each PDP-11 instruction obtained from memory is stored in the 16-bit instruction register (IR). This 
register consists of three 6-bit D-type 74174 registers (E55, E65, and E66 on K2-5) and one 74S74 D- 
type flip-flop (E33). The purpose of the IR is to store the instruction for the complete instruction cycle 
so that the IR Decode and Auxiliary ALU Control circuits can decode the correct control signals 
throughout the instruction cycle. 

The IR latches data from the SSMUX 00-15 lines on K2-7 LOAD IR L and the leading edge of Kl-5 
PROC CLK L. 

On the trailing edge of K2-9 BUT SERVICE (1) H, all the IR bits except K2-5 IR15 (1) H are cleared. 
[K2-5 IR15 (1) H is set by the same signal transition.] This means that the IR Decode circuit will see a 
conditional branch instruction in the IR after every service microstep. This action prevents the proces- 
sor from decoding a HLT instruction after an Initialize condition. 

If a bus error (BE) occurs while the Control Store output signal Enable Double Bus Error (K2-8 
ENAB DBE L) is asserted, the whole IR is cleared (PDP-11 Halt), causing the processor to halt 
automatically. Bus errors occurring without the K2-8 ENAB DBE L signal have no effect on the IR. 
K2-8 ENAB DBE L is only asserted during certain microwords in the trap sequence to prevent the 
possibility of a second bus error occuring (Double Bus Error), which would cause the trap sequence to 
be re-entered before it is completed. For example, if R6 (Stack Pointer) were an odd address, the first 
bus reference using the stack in the trap routine would cause another trap (Odd Address), a sequence 
that could tie up the CPU indefinitely if not for the Halt and Double Bus Error facilities. In short, any 
bus error during the four memory references of the trap sequence is fatal. 

4.5.3 Instruction Decoder 

4.5.3.1 Instruction Decoder Circuitry - The Instruction Decode (prints K2-5 and K2-6) and Control 
Store (prints K2-7 through K2-10) circuitry could be thought of as an internal microprocessor that 
interprets PDP-1 1 instructions and translates them into a set of microinstructions, each consisting of 
40 control signals. These control signals then determine the operation of the data path and Unibus 
control circuitry. 

A block diagram of this internal microprocessor is shown in Figure 4-1. Note that all outputs of the 
Control Store ROMs (K2-7 through K2-10) are latched in hex D-type registers (74174s). 

Nine of these latched signals (K2-7 MPC 08 H through K2-7 MPC 00 H) are fed back to the inputs of 
the Control Store ROM as the next microinstruction address (and can then be called the micro-PC). 
The wired-OR capability of these lines allows the IR Decode circuitry to force microbranching 
addresses on certain enabling conditions. The actual microbranch address will depend on the instruc- 
tion being decoded, the instruction mode used (modes 0-7), and the operand required (source or 
destination). 

The IR Decode circuitry is shown on prints K2-5 and K2-6. It consists of one 512 X 4 ROM, ten 256 X 
4 ROMs, and two 32 X 8 ROMs, and 74H01, 7402, 7400, and 7410 logic gates. The following descrip- 
tions are based on instruction types. Complete block diagrams of the microcode flow are available in 
the KD11-E print set (drawing D-FD-KD11-E). 
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4.5.3.2 Double-Operand Instructions - Double-operand instructions require two address calculations, 
one for the source and one for the destination operand. The microbranch to the sequence of micro- 
instructions that determine the source operand is initiated by the Control Store output signal K2-6 IR 
DECODE (1) H. When this signal is enabled, the IR Decode ROMs DOP Decode (E68 and E69 on 
print K2-6) check the instruction in the IR (op code bits IR15-12). If the instruction is a double- 
operand type, the ROM outputs are asserted as follows: 



Type 

Instruction 



ROM Outputs 

K2-6 K2-7 K2-7 K2-7 K2-7 K2-7 

IRCodeOOL MPC07L MPC06L MPC05L MPC04L MPC03L 



MOV(SM0*DM0) 



1 



1 



0 



0 



1 



DOP (MOV+SUB) 
MOD (SM0*DM0) 
(ADD, BIC, BIS) 



SUB(SM0*DM0) 

DOP(SM0*DM0) 

Illegal Instructions 

DOP NONMOD (SM0*DM0) 
(CMP, BIT) 



1 
1 
0 
1 



1 
0 
0 

1 



0 

1 

0 
0 



1 

0 
0 

1 



0 
0 
0 

1 



0 

1 

0 

1 



NOTE 

Ground on the MPC lines represents a logic "1." 



Coupled with the microprocessor outputs of the DOP DEC ROM are the outputs of a set of type 
74H01 gates on K2-6. These gates, when enabled, place the contents of the source mode field (IR1 1:09) 
of the PDP-1 1 instruction being decoded onto the MPC 00:02 lines. These gates are enabled by the K2- 
6 SRCH ROM output only when the instruction being decoded is of the double-operand type, the K2- 
6 IR DECODE (1) L signal is asserted, and the instruction is not reserved (K2-6 IR CODE 00 L 
unasserted). 

A summary of the various source microaddresses is shown below: 



Instruction 



Source 
Mode 



Octal 

Microbranch Address 



DOP(SM0*DM0) 



0 
1 
2 
3 
4 
5 
6 
7 



Reserved DOP 



110 
111 
112 
113 
114 
115 
116 
117 
00 



NOTE 

A ground on the MPC lines represents a logic 1. 
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The DOP DEC ROMs described above are also used to decode the microprocessor address for the 
various Control Store destination operand routines. When the K2-7 BUT DEST L input is asserted by 
the miscellaneous control field circuitry of the Control Store, the DOP DEC ROMs decode the 
instructions, determine whether it is a modifying or nonmodifying instruction, and generate the fol- 
lowing micro-PC addresses. 

ROM Outputs 



Type 

Instruction 



K2-7 
MPC07L 



K2-7 
MPC06L 



K2-7 
MPC05L 



K2-7 
MPC04L 



K2-7 
MPC03L 



Move 



(SM0*DM0) 



Modify 
(ADD BIS BIC but 
not MOV or SUB) 

Nonmodify 
(CMP BIT) 

SUB 



0 
0 

0 
0 



0 
0 

0 
0 



1 



1 



0 

1 
1 

0 



1 



0 
0 



The circuitry used to decode the destination mode field of the instruction being decoded is similar to 
that described above for microaddressing the source operand routine. A set of 74H01 gates on K2-6 is 
used to place the contents of K2-5 IR 05 (1) H through K2-5 IR 03 (1) H on the lines when enabled. 
For double-operand instructions, enabling occurs when the MPC miscellaneous control field asserts 
K2-7 BUT DEST L. 

ROM E73 on print K2-6 is also considered to be part of the DOP Decoder circuitry. This ROM 
decodes all Extended Instruction Set (EIS) instructions, generating the following micro-PC addresses 
when K2-6 IR DECODE (1) H is asserted: 



Type 

Instruction 



ROM Outputs 

K2-6 K2-7 K2-7 K2-7 K2-7 K2-7 

IRCodeOOL MPC07L MPC06L MPC05L MPC04L MPC03L 



Multiply or Divide 
(MUL, DIV) 



1 



1 



0 



0 



1 



0 



Arithmetic Shift or 
Arithmetic Shift Combined 
(ASH,ASHC) 



SOP 
XOR 

Reserved 



0 
1 

0 



1 

0 
0 



1 

0 
0 



0 

1 

0 
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The K2-6 DEST L output of the EIS Decoder ROM (E73) allows the 74H01 (E64) on print K2-6 to 
place the contents of the destination mode field of the instruction being decoded onto the micro-PC 
(MPC00-MPC02) lines. This microbranching technique is similar to that described above for micro- 
addressing the source operand routine. Use of the EIS instructions does not degrade processor timing 
or affect NPR latency. 

4.5.3.3 Single-Operand Instructions - Unlike double-operand instructions, single-operand instruc- 
tions only require one address calculation to obtain the necessary operand. Complete SOP instruction 
decoding is done with the two 256- X 4-bit ROMs (E59 and E58). 

The SOP Microbranch ROM (E59) monitors the necessary IR input lines and asserts the correct 
micro-PC address on lines K2-7 MPC03-L through K2-7 MPC 06 L when the K2-6 IR DECODE (1) L 
signal is asserted and the SOP enable signal K2-5 IR 12-14=0 H is true. The K2-6 DEST L output is 
also activated when an SOP instruction is decoded. This signal enables the destination mode mon- 
itoring circuitry described in the double-operand instruction decoding section. Microaddresses for 
SOP instructions are shown below. 

Base 
Microbranch 
Instruction Address 



SOP Modify 


040 


(CLR,COM,INC,DEC) 




SOP Non-Modify 


160 


(TST) 




NEG 


150 


Rotate and Shift 


170 


JSR 


150 


JMP 


020 


MARK 




SWAB 


030 


MFPI(D) 


100 


MTPI (D) 


250 


MFPS 


130 


MTPS 


120 



The SOP Microbranch ROM (E59) is also used to decode JSR instructions. This decoding is per- 
formed in the same manner as that for SOP instructions. The K2-6 DM0 H input to the ROM is used 
to detect the illegal instruction JMP or JSR destination mode 0. When this occurs, no micro-PC 
address is allowed on the ROM outputs. 
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The SOP Decode ROM (E58) monitors the same input signals as the SOP Microbranch ROM. Its 
purpose, however, is to decode illegal, reserved, and trap instructions. The three output signals K2-6 
IR CODE 00 L through K2-6 IR CODE 02 L are enabled as follows: 

IR Code 



Instructions 


02 


01 


00 


Reserved 


1 


1 


0 


Illegal 


1 


0 


1 


(JMP or JSR Mode 0) 








EMT 


0 


1 


0 


Trap 


0 


0 


1 



The fourth output signal of the SOP Decdoe ROM enables the destination mode monitoring circuitry 
described in the double-operand instruction decoding section. 

4.5.3.4 Branch Instructions - Conditional branch instructions are completely decoded by the Branch 
DEC ROM (E71 on print K2-6). This ROM is enabled when bits IR11:IR14 are all low and the K2-6 
IR DECODE (1) L signal is active. The input lines monitored are the four condition code bits (N, Z, V, 
and C) and four IR bits (IR15, 10, 9, and 8). When a branch is decoded, the K2-7 MPC 07 L output 
signal is enabled. The branch instruction microcode routine in the Control Store will sign-extend the 
branch offset and shift it left one place. 

4.5.3.5 Operate Instructions - There are three 256- X 4-bit ROMs in the instruction-decoding circui- 
try for decoding PDP-1 1 operate instructions. These ROMs are the Reset/Trap Decode, Trap Decode, 
and Op Branch ROMs (E62), all found on K2-6. 

The Op Branch ROM (E62) monitors IR output lines IR00:IR07. It is enabled when IR08 and IR15 
are low and K2-6 IR DECODE (1) L is active. The PDP-11 operate instructions are decoded into the 
following micro-PC addresses on the ROM outputs K2-7 MPC 00 L through K2-7 MPC 03 L. 

Microbranch 
Instruction Address 



Reset 003 

RTI/RTT 011 

Set Condition Codes 007 

Clear Condition Codes 006 

RTS 004 

Wait 014 



The Reset/Trap Decode ROM (E53) decodes Reset, RTT, and RTI instructions and activates the 
outputs K2-6 START RESET H and K2-6 ENAB TBIT H accordingly. This ROM also allows the 
lower PSW bits (K2-6 DISABLE LOAD PSW H) to be loaded only from the stack when the processor 
is operating in User mode (memory management restriction). It also treats a Reset instruction as a 
NOP in User mode. 
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The TRAP DEC ROM (E52) has the same inputs as the Op Branch ROM. Its purpose is to decode 
Halt, reserved, trap, and illegal instructions, and to enable the outputs accordingly. The K2-3 USER 
MODE H input also allows this ROM to treat Halt instructions as reserved instructions when oper- 
ating in the memory management User mode. 

IR Code 



Instruction 


02 


01 


00 


Reserved 


1 


1 


0 


Illegal 


1 


0 


1 


BPT 


1 


0 


0 


IOT 


0 


1 


1 


HALT 


Enable 


HLT RQST L 



4.6 AUXILIARY ALU CONTROL 

The AUX Control circuitry on the KD11-E consists of three bipolar ROMs, shown on K2-5. 



ROM 



Name 



32- X 8-bit 
256- X 4-bit 
256- X 4-bit 



DOP(E81) 
SOP(E60) 
ROT/SHIFT (E61) 



These ROMs determine the ALU operation to be performed whenever the microcode executes the 
action X <- Y OP B, where Y designates a scratchpad register and X designates either the B REG or a 
scratchpad register. 

The AUX DOP ROM (E81) decodes double-operand instructions, and is enabled by K2-8 AUX 
SETUP H. The following table expresses the outputs of this ROM as a function of the instruction 
being performed. (B represents the B register, A represents any scratchpad register, and F represents 
the ALU output.) 



ALU 

Instruction Operation 



ROM Outputs 

Func Code Func Code Func Code Func Code 
03H 02H 01H 00H 



MOV (B) 


F^A 


0 


1 


0 


1 


COMP(B) 


F <- A minus B 


0 


1 


0 


0 


ADD 


F <- A plus B 


1 


0 


0 


0 


SUB 


F «- A minus B 


0 


1 


0 


0 


BIT(B) 


F<- AB 


1 


0 


0 


1 


BIC(B) 


FfAB 


1 


0 


1 


0 


BIS(B) 


F^A+B 


1 


0 


1 


1 


XOR 


F^A © B 


1 


1 


0 


0 
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The AUX SOP ROM (E60) decodes single-operand instructions, and is enabled by K2-8 AUX SETUP 
H. The following table expresses the ROM outputs as a function of the SOP instruction decoded. 

ROM Outputs 





ALU 


Func Code 


Func Code 


Func Code 


Func C( 


Instruction 


Function 


03H 


02H 


01H 


00H 


SWAB 


F<- A 


o 


1 


0 


1 


CLR(B) 


F^-ZERO 


0 


0 


0 


0 


COM (B) 


F*-A~ 


0 


0 


0 


1 


INC(B) 


F<- A plus 1 


0 


0 


1 


0 


DEC(B) 


F<- A minus 1 


0 


0 


1 


1 


NEG(B) 


F<- A minus B 


0 


1 


0 


0 


ADC (B) 


F^A 












plusCBIT (0) 


0 


1 


0 


1 




F <- A plus 












CBIT(l) 


0 


0 


1 


0 


SBC(B) 


F-A 












minus CBIT(O) 


0 


1 


0 


1 




P <_ A minus 

* ~ / » 111111 U J 












CBIT(l) 


o 


o 


1 


1 


TST(B) 


F<- A 


o 


1 


o 


1 


ROR (B) 


F<- B 


o 


1 


1 


o 


ROL (B) 


F<- B 


o 


1 


1 


o 


ASR (B) 


F<- B 


o 


1 


1 


o 


ASL(B) 


F^B 


0 


1 


1 


0 


MARK 


N/A 


0 


0 


0 


0 


MFPI 


F^-A 


0 


1 


0 


1 


MTPI 


F^A 


0 


1 


0 


1 


SXT 


F<-NBIT (0) 


0 


0 


0 


0 




F-NBFT(l) 


0 


1 


1 


0 


MTPS 


F-A 


0 


1 


0 


1 


MFPD 


F^-A 


0 


1 


0 


1 


MTPD 


F*-A 


0 


1 


0 


1 


MFPS 


F^A 


0 


1 


0 


1 



Auxiliary control signals are also necessary for performing rotate and shift operations. The 
ROT/SHFT ROM (E61) on K2-5 decodes these instructions and outputs those control signals 
required to shift the contents of the B REG. Inputs K'l-1 BREG 00 (1) H, Kl-10 CC N H, and Kl-1 
CBIT (1) H also determine the K2-5 SERIAL SHIFT H and K2-5 ROT CBIT (1) H signals. The 
SERIAL SHIFT H signal is sent to the BYTE MUX (E106 on Kl-10), where it is used in determining 
the Kl-10 SHIFT IN 07 H signal used in the B REG shifting operation. K2-5 ROT CBIT (1) H is used 
in the calculation of the new carry condition (C and V Bit ROM - E105 on Kl-10). Note that for all 
rotate and shift operations, the AUX SETUP is performed on the B <- B step before each X <- Y OP B 
step previously mentioned. This is done to allow the condition codes to be set up without slowing the 
processor. 

Table 4-9 summarizes the auxiliary control instructions. 
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Table 4-9 Auxiliary Control for Binary and Unary Instructions 







Condition Codes 


A I I T 

ALU 




Instruction 


NandZ 


V 


C 


Function 


CIN 


MOV(B) 


Load 


Cleared 


Not affected 


A Logical 


0 


CMP(B) 


Load 


Load like Subtract. 


Load like Subtract. 


A minus B 


0 


Di 1(b) 


Load 


Cleared 


Not affected 


A • B Logical 


u 


B1C(B) 


Load 


Cleared 


Not affected 


A • B Logical 


0 


BIS(B) 


Load 


Cleared 


Not affected 


A <- B Logical 


0 


ADD 


Load 


Set if operands are same 
sign and result different. 


Set if carry out. 


A plus B 


0 


SUB 


Load 


Set if there was arithmetic 
overflow as a result of the 
operation (i.e., if operands 
were of opposite signs and 
the sign of the source was 
the same as the sign of the 
result; cleared otherwise. 


Set if carry. 


A minus B 


0 


AUK 


Load 


Cleared 


Not affected 


A * R 


n 

KJ 


LLK(dJ 


Load 


Cleared (like Add) 


Clear 


u 


u 


COM(B) 


Load 


Cleared 


Set 


A 


0 


1NC(B) 


Load 


Set if destination held 
100000 before operand. 


Not affected 


A plus 1 


+ 1 


DEC 


Load 


Set if result is 100000. 


Not affected 


A minus 1 


1 


NEG(B) 


Load 


Set if result is 100000. 


Cleared if result is 0; 
set otherwise. 


A minus B 


0 


ADL(r>) 


Load 


Set if destination was 
077777 andC = 1. 


Set if destination was 
177777 andC = 1. 


A piUS 1 


u 


SBC(B) 


Load 


Set if destination was 
100000. 


Set if destination was 
0 and C = 1 ; cleared 
otherwise. 


A minus CBIT 


0 


TST(B) 


Load 


Cleared 


Cleared 


A Logical 


0 


ROR(B) 


Z+-1 
lf(15:01)*C = 0 


Unaffected 


(0) 


B Logical 


0 
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Table 4-9 Auxiliary Control for Binary and Unary Instructions (Cont) 







Condition Codes 


ALU 




Instruction 


NandZ 


V 


C 


Function 


cir 


ROL(B) 


Z<-\ 
lf(14:00)*C = 0 
N<-(14) 


Unaffected 


(15) 
B(7) 


B Logical 


0 


ASR(B) 


Z<-1 
If(15:01) = 0 
N<-N 


Unaffected 


0«-(15) 


B Logical 


0 


ASL(B) 


Z-H 
If(14:01) = 0 
N«-(14) 




C<-(15) 


B Logical 


0 


SWAB 


Load 


Cleared 


Cleared 


A Logical 


0 


SXT 


Z— Load 
N- Unaffected 


Cleared 


Cleared 


1 


0 


MFPI 


Load 


Cleared 


Unaffected 


A Logical 


0 


MTPI 


Load 


Cleared 


Unaffected 


A Logical 


0 


MTPS 


Z-Set 
If SRC(7)=0 

N-Set 
If SRC(7)=1 


Cleared 


Unaffected 


A Logical 


0 


MFPD 


Load 


Cleared 


Unaffected 


A Lopiral 


o 


MTPD 


Load 


Cleared 


Unaffected 


A Logical 


0 


MFPS 


Z-Set 
If PS(7)=0 

N-Set 
If PS(7)=1 


Cleared 


Unaffected 


A Logical 


0 
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4.7 DATA TRANSFER CIRCUITRY 



4.7.1 General Description 

All Unibus data transfers are controlled by the DAT TRAN circuitry on K2-1. This logic monitors the 
busy status of the Unibus, controls the processor bus control lines BBSY, MSYN, CI, and CO, and 
detects parity errors (PE), and bus errors (BE). 

4.7.2 Control Circuitry 

4.7.2.1 Processor Clock Inhibit - All processor data transfers on the Unibus are initiated by K2-8 
BUF DAT TRAN (1) H. When Kl-5 TAP 30 H goes high, the signal combines with the signal K2-1 
EOT L (normally a logic 1 between transfers) to create K2-1 TRAN INH L, shutting off the processor 
clock until the transfer is completed. 

4.7.2.2 Unibus Synchronization - The synchronizer logic shown in Figure 4-19 (from K2-1) arbitrates 
whether the processor or some other Unibus peripheral will control the Unibus. A logic 1 level (+3 V) 
at the set input of the E31 flip-flop on K2-1 specifies that the bus is presently in use. Each of the inputs 
that combine to create this level monitors a specific set of bus conditions. 



K2-1 DATIP (1) L 
K2-1 DATIP (0) L 

K2-1 BBSY H 
K2-2 NPR H 

K2-2 NPG (1) H 
K2-2N0 SACK L 




2 


D 1 
7474 
E31 




3 


c 0 





-K2-1 BUS IN USE H 



K2-8 BUF DAT TRAN (1) H — 
DE2 

K1-5 TAP 30 



7400\j 
E49 J~ 




100 pf 



START 
"TRAN H 



11-3893 



Figure 4-19 Unibus Synchronizer 
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NPR 

(K2-2 NPR H) 



A Unibus peripheral has asserted a nonprocessor request 
(NPR) and wishes to gain control of the bus immediately. 



BBSY 

(K2-1 BBSY H) 
NPG 

[K2-2 NPG (1) H] 



NO SACK L 
(K2-2 NO SACK) 



DATIP (0) L 
[K2-1 DATIP (0) 1] 



Another Unibus peripheral already has control of the bus, and 
is asserting a bus busy (BBSY) signal. 

An NPR device has requested control of the Unibus and the 
KD11-E processor has issued a nonprocessor request grant 
(NPG). The condition may exist where the NPR device has 
already recognized the NPG and has dropped its NPR signal, 
while not yet having asserted a SACK or BBSY. 

A device has requested control of the Unibus. The KD11-E 
processor has issued a grant, and the device has returned SACK 
L, causing NO SACK L to go high. The condition may exist 
where only SACK L remains on the Unibus for a period of time 
before the peripheral asserts BBSY. 

When this input is true, all of the above signals are overridden. 
It indicates that the processor is performing a DATIP 
(Read/Modify/Write) operation, and has control of the Unibus 
(BBSY asserted). NPR devices may, however, be granted bus 
control, but must wait until the processor releases BBSY before 
asserting theirs. (DATIP operations dictate worst-case bus 
latencies for NPR devices.) 



BUS SSYN L A data transfer is still being completed; therefore, the processor 

must wait before initiating another. 

If none of the above Bus-in-Use conditions exist, the K2-8 BUF DAT TRAN (1) H signal sets the E3 1 
flip-flop on K2-1 when Kl-5 TAP 30 H goes high, and activates K2-1 START TRAN H to start the 
transfer. The RC circuit at the output of E36 eliminates any noise that may result from the synchro- 
nizer under worst-case conditions. 



4.7.2.3 Bus Control - Once the K2-1 START TRAN H signal is activated, the DAT TRAN circuitry 
begins a Unibus data transfer operation by asserting K2-1 ENAB ADDRS L, triggering the following 
actions: 



1. Enables the bus address drivers (BUS A15:A00 on Kl-6). 



2. Enables the BBSY driver (K2-1). 



3. Enables the bus control signals BUS CO and BUS CI, which determine the kind of transfer 
being performed. 



Cl 


CO 


Operation 


0 


0 


DATI 


0 


1 


DATIP 


1 


0 


DATO 


1 


1 


DATOB 



The actual condition of these control lines is determined by K2-8 BUF CO (1) H and K2-8 
BUF Cl (1) H. 
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4. Enables the bus data drivers (BUS DOO-BUS D15) if the operation being performed is a 
DATO. 

4.7.2.4 M8264 NO-SACK Timeout Module - The M8264 is a quad-height module containing circui- 
try that asserts BUS SACK L on the Unibus if a device requesting Unibus control does not assert 
SACK within 10 fis after a grant line has been enabled (Figure 4-20). 

The grant signals (BUS NPG and BUS BG7 through BUS BG4) are ORed (E3) on the M8264. The 
output of the OR gate enables a NAND gate (E6) and triggers a monostable multivibrator (E5). The 
signals produced are ANDed (El) to enable BUS SACK L. The monostable effectively delays (by 10 
lis) the assertion of BUS SACK L since it produces a 10 jus pulse which prevents the AND gate from 
being enabled. BUS SACK L, when asserted, will cause the processor to drop the grant line, which will 
in turn cause the M8264 to drop BUS SACK L. 

This module prevents the processor from being hung if a grant line is asserted and BUS SACK is not 
returned by the device requesting bus control. If the requesting device returns BUS SACK, the M8264 
will not assert BUS SACK since the grant line will be dropped before the monostable times out. 

As a maintenance aid, a counter is provided (E4) to drive a set of LEDs. The binary counter counts up 
one each time BUS SACK is asserted by the M8264 and the number of occurrences is indicated by the 
LEDs. The maximum number recorded is 15 before the counter is reset. The counter is cleared and the 
monostable multivibrator is reset when BUS DC LO L becomes asserted (i.e., upon system power-up). 

4.7.2.5 MSYN/SSYN Time-Out Circuitry - Unibus specifications require that the BUS MSYN L 
control signal be enabled no sooner than 150 ns after the bus address, data, and control lines have been 
asserted. To meet this requirement, the circuitry in Figure 4-21 has been incorporated into the DAT 
TRAN logic (K2-1). 

The multiplexer (E10) shown in Figure 4-22 helps adapt the DAT TRAN circuitry to the type of bus 
operation being performed (DATI or DATO). Specific functions performed are as follows: 

1. Generates the correct Unibus control signals [K2-1 UBUS CO (1) H and K2-1 UBUSCl(l) 
H]. 

2. Inhibits the detection of parity errors during DATO operations. 

3. Generates an End of Transfer (EOT L) signal as soon as BUS SSYN is returned by an 
addressed peripheral. 

4. Delays the assertion of BUS MSYN, using the clock signal Kl-5 ALLOW MSYN H, which 
does not become asserted until the Physical Bus Address register has been loaded. 

NOTE 

This applies only to DATI or DATIP. During 
DATO or DATOB, the bus address is never loaded 
in the same microcycle that does the DATO or 
DATOB. 
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Figure 4-20 NO-SACK Timeout Module 
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Figure 4-2 1 SSYN / MSYN Control 
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Figure 4-22 Data Transfer Multiplexer 



The RC circuit shown in Figure 4-21 prevents the MSYN flip-flop (E31) from being clocked until 
approximately 150 ns after the bus address and control lines are placed on the bus. Once this latch is 
set, BUS MSYN L is activated and the SSYN TIMEOUT one-shot E16 is triggered. When SSYN is 
returned by the addressed peripheral, both the MSYN flip-flop (E31) and the SSYN TIMEOUT one- 
shot are cleared. The processor clock is then freed by the release of K2-1 TRAN INH L. If a DATI or 
DATIP operation is being performed, that will be clocked into either the scratchpad, B REG, PSW, or 
IR on the next low-to-high transition of Kl-5 PROC CLK L. 

If a DATO or DATOB operation is being performed, the data bus drivers are disabled after SSYN is 
returned from the addressed peripheral but before the MSYN line is unasserted. 

4.7.2.6 Bus Errors - Once the SSYN TIMEOUT one-shot is triggered, SSYN must be returned 
within 22 /xs. If SSYN is not returned in this time, E16 times out, setting the TIMEOUT flip-flop 
(E32). The output of this latch then generates the signal K2-1 ABORT RESTART L and pulse K2-1 
ABORT H. K2-1 ABORT RESTART L reenables the PROC CLK and K2-1 ABORT H sets the Bus 
Error flip-flop (E33). This same pulse that sets the Bus Error flip-flop also clears the micro-PC address 
latches (MPC00 through MPC008) on K2-7, forcing the processor to enter the service microroutine on 
the next PROC CLK L low-to-high transition. 

4.7.2.7 Parity Errors - If a data transfer is being performed with a parity memory (e.g., MSI 1-JP or 
MM11-DP), all parity errors detected by the memory will be reflected back to the KD11-E on the 
Unibus lines BUS PA L and BUS PB L on K2-1 (Figure 4-23). 



Control 


Error 


PA PB 


Description 


0 0 


No Parity Error 
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Errors detected while performing a DATIP or DATI [K2-8 BUF CI (1) H unasserted] will result in the 
Parity Error flip-flop (E34) being set when SSYN is returned to the processor. Processor operations 
resulting from Parity Error will be discussed further in Paragraph 4.11, Service Traps. 

4.7.2.8 End of Transfer Circuitry - To synchronize the DAT TRAN logic with the main KD11-E 
processor clock, the End of Transfer (EOT) circuitry (Figure 4-24) has been incorporated into the CPU 
(K2-1). During a DATI or DATIP, an EOT L signal is generated approximately 100 ns after SSYN is 
returned to the processor. That EOT L removes the processor clock disabling signal (Paragraph 
4.7.2.1), K2-1 TRAN INH L. During a DATO or DATOB, K2-1 TRAN INH L is unasserted immedi- 
ately when SSYN is returned. 

4.7.2.9 Data-in-Pause Transfer - Another circuit included in the DAT TRAN logic detects Data-in- 
Pause (DATIP) transfers and controls the bus control signal BBSY. When a DATIP 
(Read/Modify /Write) bus operation is initiated, the flip-flop (E32) is latched, forcing the processor to 
hold BBSY L until the DATO portion of the routine has been completed. While BBSY is asserted, no 
other Unibus peripheral can seize control of the bus. This feature often determines the maximum bus 
latency for NPR devices (K2-1). 
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Figure 4-23 Error Logic 
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Figure 4-24 End-of-Transfer Logic 



4.7.2.10 Odd Address Detection - The circuitry shown in Figure 4-25 is incorporated in the KD1 1-E 
to detect odd address errors. ROM E78 (print K2-8) monitors the signals K2-8 BUF DAT TRAN (1) 
H, K2-5 BYTE H, and Kl-6 VBA00 (1) H, and asserts K2-8 DISABLE MSYN L when an odd address 
is detected. The multiplexer circuit (E38 on K2-4) forces the processor to always autoincrement or 
autodecrement the PC (R7) or the SP (R6) scratchpad registers by two, regardless of the type of 
instruction being performed. This is done by preventing the K2-4 DISABLE MSYN +1 L signal from 
being asserted. 

4.8 POWER FAIL/ AUTO RESTART 

The KD11-E power fail/auto restart circuitry (K2-3) serves the following purposes: 

1 . Initializes the microprogram, the Unibus control, and the Unibus to a known state immedi- 
ately after power is applied to the computer. 

2. Notifies the microprogram of an impending power failure. 

3. Prevents the processor from responding to an impending power failure for 2 ms after initial 
startup. 

The actual power fail/auto restart sequences are microprogram routines. The operation of the power 
fail/auto restart circuitry depends on the proper sequencing of two bus signals: AC LO and DC LO. 
Because of the electrical properties of the Unibus drivers and receivers, the entire computer system 
must be powered up for the machine to operate. Therefore, the processor is notified of a power fail in 
peripherals, as well as in its own ac source. 
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Figure 4-25 Odd Address Detection 



The notification of power status of any PDP-1 1 system component is transmitted from each device by 
the signals BUS AC LO L and BUS DC LO L (K2-3). The power-up sequence (Figure 4-26) shows that 
BUS DC LO L is unasserted before BUS AC LO L is unasserted. When BUS DC LO L is not asserted, 
it is assumed that the power in every component of the system is sufficient to operate. When BUS AC 
LO L is not asserted, there is sufficient stored energy in the regulator capacitors of the power supply to 
operate the computer for 5 ms, should power be shut down immediately. 

As ac power is removed, BUS AC LO L is asserted first by the power supply warning the processor of 
an impending power failure. When BUS DC LO L is asserted, it must be assumed that the computer 
system can no longer operate predictably/Memories manufactured by DIGITAL use BUS DC LO L 
as a switched signal, turning them off even if power is still available. Time At2 (Figure 4-26) is the time 
delay between the assertion of BUS AC LO L and the assertion of BUS DC LO L; this time delay must 
be greater than 5 ms. This allows for power to be rapidly cycled on and off. According to PDP-11 
specifications, upon system startup a minimum of 2 ms run time is guaranteed before a power fail trap 
occurs, even if the line power is removed simultaneously with the beginning of the power-up sequence. 
After the power fail trap occurs, a minimum of 2 ms run time is guaranteed before the system shuts 
down. Given the tolerances permitted in the timing circuitry used in most in most equipment, At2 must 
be greater than 5 ms. 
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Figure 4-26 BUS AC LO and BUS DC LO Timing Diagram 



When a pending power fail is sensed, a program trap occurs, causing the present contents of PC (R7) 
and the PSW to be pushed onto the memory stack, as determined by the contents of R6 (Stack Pointer 
register). The PSW is then loaded with the contents of location 26 8 and R7 with the contents of 24 8 . 
Processing is continued with the new R7 and PSW. The user's program must prepare for the impend- 
ing power failure by storing away volatile registers and reloading location 24 8 and 26 8 with a power-up 
vector. This vector points to the beginning of a restart routine. 

When power is restored, the processor loads the PC (R7) with the contents of location 24 8 and the 
PSW with the contents of location 26 8 . After loading these registers, the user program presumably will 
prepare locations 24 8 and 26 8 for another power failure. If the HLT RQST L input is asserted by an 
external switch closure, the processor powers up through locations 24 8 and 26 8 , and halts. 

Schematics for the power fail, auto restart, and bus reset logic are on K2-3. One-shot E14 generates a 
150-ms processor INIT pulse as soon as BUS DC LO L is nonasserted after power is applied to the 
processor. At the end of 1 50 ms, the PUP one-shot (E7) is fired if BUS DC LO L is not asserted and the 
processor begins the PC and PSW load routine. The PUP one-shot generates a 2-ms pulse, during 
which the assertion of BUS AC LO L is ignored. 

The triggering of the 150-ms INIT one-shot also resets the POWER INIT flip-flop (E24). Setting this 
flip-flop forces the Control Store to run the power-up routine beginning at micro-PC address 001. It is 
this routine that reads locations 24 8 and 26 8 for the new PC and PSW. 

After PUP has timed out, the assertion of BUS AC LO L would fire the one-shot PDWN (E7). Upon 
entering the next service microcode state, K2-3 PFAIL H is latched into E19 (K2-2), causing a power 
fail trap to be recognized by the microprogram on entering the next service state. Various traps are 
arbitrated by the BUT service ROMs (E50 and E51 on K2-3). 

If a momentary power failure occurs that causes the assertion of BUS AC LO L but does not cause the 
assertion of BUS DC LO L, the processor will restart when the PDWN one-shot times out, retrigger- 
ing the INIT one-shot. 
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When a Reset instruction is decoded by ROM E53, the ROM output signal START RESET H is 
clocked into the Start Reset flip-flop (E54 on K2-2). This flip-flop output triggers a 100-ms INIT, after 
which the processor continues operation. 

4.9 PROCESSOR CLOCK 

The processor clock circuitry for the KD1 1-E is shown in Figure 4-27 and on print Kl-5. A delay line 
is used to generate a pulse train, to which the entire processor is synchronized. Because the KD 1 1-E is 
a fully clocked processor, events that result in the alteration of storage registers occur only on defined 
edges of the processor clock. 

If all clock disable inputs are unasserted, the clock will begin running as soon as +5 V is applied. The 
length of an operating cycle can be either 180 ns or 240 ns, depending on the nature of the instruction 
being performed. Most microinstructions employ the shorter cycle, with the longer one only necessary 
when the machine is performing a DATO or DATOB, or in situations where the condition code must 
be determined before an operation can be performed. Long cycles are also used in loading the Bus 
Address register when memory management is turned on. 

The clock is turned on and off by the gating of the feedback through the delay line. Taps of 120 ns, 90 
ns, and 30 ns make it possible to vary the length of the cycle, according to a signal input [K2-8 LONG 
CYCLE (1) L] from the Control Store, as the processor clock timing diagrams in Figure 4-17 show. 
The indicated jumpers are inserted at Wl and W2 in the standard configuration; the overall cycle can 
be slowed down slightly (approximately 30 ns) by inserting jumpers at the alternate locations (shown 
on Kl-5 by dotted lines) instead. It is also possible to disable the clock manually and use the manual 
clock input; any TTL-compatible waveform may be employed. Multiplexer E94 issues the feedback 
signal that, in effect, determines the length of the cycle. 

The clock is turned off by the appropriate signal under the following conditions: 

1. During a BUS INIT that is not caused by a RESET 

2. During the INIT portion of the power-up routine 

3. During the INIT portion of the power-down routine 

4. During a Reset 

5. During the BUT Service arbitration delay 

6. During a priority interrupt 

7. While BUS SACK is asserted by an interrupting device (not for NPR transfers) 

8. During bus data transfers 

9. After a Halt instruction is executed 
10. When the manual clock is enabled 
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Figure 4-27 Processor Clock Circuit 
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4.10 PRIORITY ARBITRATION 



4.10.1 Bus Requests 

The KD1 1-E responds to bus requests (BRs) in a manner similar to that of the other PDP-1 1 proces- 
sors. Peripherals may request the use of the Unibus in order to make data transfers or to interrupt the 
current processor program by asserting a signal on one of the four BR lines, numbered BR4, BR5, 
BR6, and BR7 in order of increasing priority. For example, if two devices, one at priority 5 and the 
other at priority 7, assert BRs simultaneously, the device at priority 7 is serviced first. Furthermore, if 
the processor priority, determined by PSW bits 07:05, is at level 4, only devices requesting BRs at levels 
higher than 4, such as BR7, BR6, or BR5, are serviced. Table 4-10 contains the order of priority for all 
BRs and other traps. 



Table 4-10 Priority Service Order 



Priority 


Service Order 


Highest 


Halt Instructions 


Odd Address 




Memory Management 




Error 




Time-Out 




Parity Error 




Trap Instruction 




Trace Trap 




Stack Overflow 




Power Fail 




Halt from Console 




BR7 




BR6 




BR5 




BR4 


Lowest 


Next Instruction Fetch 



Because a BR can cause a program interrupt, it may be serviced only after completion of the current 
instruction in the IR. A device that requests a program interrupt must, at the appropriate time, place a 
vector address on the Unibus data lines. The processor first stacks away the current contents of PSW 
and R7; then a new PSW is loaded from the contents of the vector address plus two and a new PC is 
loaded with the contents of the vector address. Further discussion of how the processor handles this 
BR routine is contained in the section on Service (Paragraph 4.11). 
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Arbitration logic for BRs is contained on print K2-2 and in Figure 4-28. All BRs are received directly 
from the Unibus (Unibus receivers E17), and latched into register E19 (quad D-type latch, 74S174) 
when the microprogram enters the next service state [K2-9 BUT SERVICE (1) H is true]. The BR 
Priority Arbitration ROM (E29) then determines whether the present processor priority [PSW (7:4)] is 
higher than the highest BR received and, if not, which BR received has the highest priority. Arbitration 
performed by E29 in the order of priority are shown below. 
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Figure 4-28 Priority Arbitration Synchronizer 
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If the highest BR received is of a higher priority level than the processor, the corresponding grant 
enable ROM output is asserted low (Figure 4-29). With no HLT RQST or trap instruction pending, 
the processor clock will be disabled by the K2-2 BG INH L signal. The actual bus grant is not trans- 
ferred to the Unibus until the Enable BG flip-flop (El 2) is set. Grants (both BG and NPG) are 
controlled by the synchronizer logic shown in Figure 4-28 and on print K2-2. 

This circuitry arbitrates whether a bus grant (BG) or a nonprocessor grant (NPG) will result, depend- 
ing on which flip-flop input line (set or reset) was deactivated first. The set input K2-2 BUT SERVICE 
L will cause the flip-flop to issue the BG ENAB H signal after a delay of 175 ns. Once the flip-flop is 
set, the bus grant arbitrated by the BR Priority Arbitration ROM (E29) is channeled onto the Unibus 
(bus driver E75). When the requesting peripheral receives BG, it returns BUS SACK L. 

Upon receiving BUS SACK L, the processor clears its Enable BG flip-flop, removing the bus grant 
from the Unibus, and sets the SACK RET flip-flop to keep the processor clock disabled. Removal of 
bus grant causes the peripheral to drop its BUS SACK L (provided that BBSY is unasserted), assert 
BUS INTR L and BBSYL, and enable a vector address onto the Unibus data lines. The processor then 
deskews the removal of SACK, clears the SACK RET flip-flop (E5), and enables the processor clock 
again. Once in operation, the processor clocks the peripheral vector address into the B REG, returns 
BUS SSYN L, and begins running the microcode trap routine that branches the processor to the 
interrupt handling program determined by the vector obtained. 

4.10.2 Nonprocessor Requests (NPRs) 

NPRs are a facility of the Unibus that permit devices on the Unibus to communicate with each other 
with minimal participation of the processor. The function of the processor in servicing an NPR is to 
yield control of the bus in a manner that does not disturb the execution of an instruction by the 
processor. For example, the processor will not relinquish the bus following the DATI portion of a 
DATIP transfer. 

When the reset input of E5 (K2-2 NPR H) becomes unasserted before the set input, and BUS SACK L 
is not true, the flip-flop issues K2-2 NPG ENAB H, enabling the BUS NPG H Unibus line and 
granting the bus to the DMA device. The requesting device then returns BUS SACK L, clearing the 
NPG, and waits until the bus is free (no BBSY). 

4.10.3 Halt Grant Requests 

The KD11-E implements what is, in effect, another priority level by monitoring the 
HALT/CONTINUE switch on the front panel. When a Halt is detected (HLT RQST L asserted), the 
processor recognizes it as an interrupt request (refer to priority levels in Paragraph 4.10.1) upon enter- 
ing the next service microstate. The processor then inhibits the processor clock and returns a recogni- 
tion signal (K2-2 HLT GRANT H), causing the console to drop HLT RQST L and assert BUS SACK 
L, gaining complete control of the Unibus and the KD11-E. 

The user can maintain the processor in this inactive state (Halted) indefinitely. When the HALT switch 
is released, the user's console releases BUS SACK L, and the processor continues operation as if 
nothing had happened. 
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Figure 4-29 Priority Bus Control 



4.11 SERVICE TRAPS 



4.11.1 General Description 

All interrupts, error traps, and instruction traps are recognized and serviced by the KD1 1-E when the 
processor enters what is called the service microinstruction state. The functions performed during this 
state are most critical to the operation of the processor. 

When the service state is entered, all bus interrupts, error traps, and instruction traps realized during 
the performance of the last instruction are arbitrated by the service ROMs (E50 and E51 on print K2- 
3). Each trap condition is then serviced according to its priority, as listed in Table 4-10. 

4.11.2 Circuit Operation 

The service ROMs (E50 and E51 on print K2-3) service a specific trap by generating a vector address 
unique to that trap condition (Table 4-11). Upon leaving the service state, the processor is forced to 
push its present program counter (PC) and processor status word (PSW) onto its memory stack and 
fetch a new PC from the location specified by the vector address. A new PSW is then obtained from the 
next memory location after the vector. The end result of these operations is that the processor is now 
performing a software subroutine written by the user that could correct or indicate the occurrence of a 
specific error. 

The various trap conditions that cause the processor to vector are as follows: 

Bus Errors A bus error indicates that the processor has attempted to access 

nonexistent memory or odd address (non-byte), or a memory 
location that did not return BUS SSYN within 22 /xs. The detec- 
tion circuitry for bus errors is described in Paragraph 4.7.2.6 of 
this manual. 



Stack Overflow Error Any attempt by the processor to decrement the contents of the 

Stack Pointer register (R6) below the 400-location stack limit 
(Kl-10 8-15 = 0 H will result in the Stack Overflow flip-flop 
(E24 on K 2-3) being set on the next transition of K 1-5 PROC 
CLK L. [Note that this does not apply to user stack (R16).] 

Parity Error Parity error detection circuitry is described in Paragraph 

4.7.2.7. 



Power Failure 
Trace Trap 



Reserved Instructions 
Illegal Instructions 
EMT Instructions 
Trap Instructions 



The power failure circuitry is described in Paragraph 4.8. 

This trap is program-controlled by the user, allowing him to 
insert a processor/user interactive subroutine into his main pro- 
gram. The circuitry is described in Paragraph 4.2.6. 

Signals IR CODE 00 L-IR CODE 02 L are generated by the IR 
Decode ROMs on K2-6 for these conditions. Their decoding is 
discussed in Paragraph 4.5.3. 



Upon entering the service microinstruction state, the service ROMs (E50 and E51 K2-3) monitor any 
combination of the above trap conditions which, if true, cause the assertion of microprocessor address 
line K2-7 MPC 00 L. While still in the service state, the ROM also generates a specific vector address 
(Table 4-11), using outputs K2-3 C2 H, K2-3 C3 H, and K2-3 C4 H, and channels it onto the processor 
AMUX lines to the SSMUX by activating Kl-10 AMUX SO H. 
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Table 4-11 Vector Addresses 



{"li^tcil f IniKiic 




Vector Address 


Trap Conditions 


004 


Time-Out Odd Address and Stack Overflow Errors 


010 


Illegal and Reserved Instructions 


014 


T-BitTrap (BPT) 


020 


Input/Output Trap (IOT) 


024 


Power Fail 


030 


Emulator Trap (EMT) 


034 


Trap Instruction 


114 


Memory Parity Errors 


250 


Memory Management Errors 



Before leaving the service state, the service ROMs also clear the condition that caused the original 
trap. This is done either by asserting K2-3 STOV SERV H or K2-3 PFAIL SERV H, or by performing 
the steps in the trap service routine. For those traps specified by the IR Code lines, however, it is 
necessary to remove the instruction in the IR. This is done through microcode output K2-9 BUT 
SERVICE (1) H, which ORs with K2-2 PROC INIT H to generate K2-3 SERV IR H and, hence, K2-3 
SERV IR (1) L, removing the trap instruction from the IR. This prevents the processor from looping 
on the same trap condition. 

For bus requests (BRs), the BUS INTR L control signal is allowed to force K2-7 MPC 00 L during 
service, provided that there are no other traps of higher priority. By enabling this line, the processor 
will branch to the trap routine. Higher priority BR interrupts are prevented from receiving BG by K2- 
9 BUT SERVICE (1) H. 

4.12 MEMORY MANAGEMENT 
4.12.1 General 

4.12.1.1 Introduction - This section describes the memory management unit of the KD11-E Central 
Processor. The KD1 1-E provides the hardware facilities necessary for complete memory management 
and protection. It is designed to be a memory management facility for systems where the memory size 
is greater than 28K words and for multiuser, multiprogramming systems where protection and reloca- 
tion facilities are necessary. 

4.12.1.2 Programming - The memory management hardware has been optimized toward a multi- 
programming environment and the processor can operate in two modes, Kernel and User. When in 
Kernel mode, the program has complete control and can execute all instructions. Monitors and super- 
visory programs would be executed in this mode. 

When in User mode, the program is prevented from executing certain instructions that could: 

1. Cause the modification of the Kernel program. 

2. Halt the computer. 

3. Use memory space assigned to the Kernel or other users. 

4. Issue a Reset. 
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In a multiprogramming environment, several user programs could be resident in memory at any given 
time. The task of the supervisory program would be to: controf the execution of the various user 
programs, manage the allocation of memory and peripheral device resources, and safeguard the integ- 
rity of the system as a whole by careful control of each user program. 

In a multiprogramming system, the management unit provides the means for assigning pages (reloca- 
table memory segments) to a user program and preventing that user from making any unauthorized 
access to those pages outside his assigned area. Thus, a user can effectively be prevented from acciden- 
tal or willful destruction of any other user program or the system executive program. 

Hardware-implemented features enable the operating system to dynamically allocate memory upon 
demand while a program is being run. These features are particularly useful when running higher level 
language programs, where, for example, arrays are constructed at execution time. No fixed space is 
reserved for them by the compiler. Lacking dynamic memory allocation capability, the program would 
have to calculate and allow sufficient memory space to accommodate the worst case. Memory manage- 
ment eliminates this time-consuming and wasteful procedure. 

4.12.1.3 Basic Addressing - The addresses generated by all PDP-11 family central processor units 
(CPUs) are 18-bit addresses. Although the PDP-11 family word length is 16 bits, the Unibus and CPU 
addressing logic actually is 18 bits. Thus, while the PDP-1 1 word can only contain address references 
up to 32K words (64K bytes) the CPU and Unibus can reference addresses up to 128K words (256K 
bytes). These extra two bits of addressing logic provide the basic framework for expanding memory 
references. 

In addition to the word length constraint on basic memory addressing space, the uppermost 4K words 
of address space are always reserved for Unibus I/O device registers. In a basic PDP-11 memory 
configuration (without management), all address references to the uppermost 4K words of 16-bit 
address space (160000-177777) are converted to full 18-bit references with bits 17 and 16 always set to 
1. Thus, a 16-bit reference to the I/O device register at address 173224 is automatically internally 
converted to a full 18-bit reference to the register at address 773224. Accordingly, the basic PDP-11 
configuration can directly address up to 28K words of true memory, and 4K words of Unibus I/O 
device registers. 

4.12.1.4 Active Page Registers - The memory management unit uses two sets of eight 32-bit Active 
Page registers (shown on print Kl-7). An APR is actually a pair of 16-bit registers: a Page Address 
register (PAR) and a Page Descriptor register (PDR). These registers are always used as a pair and 
contain all the information needed to describe and relocate the currently active memory pages (Figure 
4-30). 

One set of APRs is used in Kernel mode, and the other in User mode. The choice of which set to be 
used is determined by the current CPU mode contained in the processor status word. 
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KERNEL ACTIVE PAGE REGISTER 



0 

1 

2 

3 

4 

5 

6 

7 | I 

PAR PDR 

USER ACTIVE PAGE REGISTER 

0 I I 

1 

2 

3 

4 

5 

6 

7 I I 

PAR PDR 

11-1396 

Figure 4-30 Active Page Registers 



4.12.1.5 Capabilities Provided by Memory Management 

Memory Size (words) 124K, max (plus 4K for I/O and registers) 



Address Space 

Modes of Operation 

Stack Pointers 

Memory Relocation 
Number of Pages 
Page Length 

Memory Protection 



4.12.2 Relocation 



Virtual (16 bits) 
Physical (18 bits) 

Kernel and User 

2 (one for each mode) 



16 (8 for each mode) 
32 to 4096 words 

No access 
Read-only 
Read/ write 



4.12.2.1 Virtual Addressing - When the memory management unit is operating, the normal 16-bit 
direct address is no longer interpreted as a direct physical address (BA) but as a virtual address (VBA) 
containing information to be used in constructing a new 18-bit physical address. The information 
contained in the VBA is combined with relocation and description information contained in the Active 
Page register (APR) to yield an 18-bit BA. 
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Because addresses are automatically relocated, the computer may be considered to be operating in 
virtual address space. This means that no matter where a program is loaded into physical memory, it 
will not have to be "relinked"; it always appears to be at the same virtual location in memory. 

The virtual address space is divided into eight 4K-word pages. Each page is relocated separately. This 
is a useful feature in multiprogrammed timesharing systems. It permits a new large program to be 
loaded into discontinuous blocks of physical memory. 

A page may be as small as 32 words, so that short procedures or data areas need occupy only as much 
memory as required. This is a useful feature in real-time control systems that contain many separate 
small tasks. It is also a useful feature for stack and buffer control. 

A basic function is to perform memory relocation and provide extended memory addressing capability 
for systems with more than 28K of physical memory. Two sets of Page Address registers are used to 
relocate virtual addresses to physical addresses in memory. These sets are used as hardware relocation 
registers that permit several users' programs, each starting at virtual address 0, to reside simultaneous- 
ly in physical memory. 

4.12.2.2 Program Relocation - The Page Address registers are used to determine the starting address 
of each relocated program memory. Figure 4-31 shows a simplified example of the relocation concept 
as implemented by the circuitry on print Kl-6. 




PHYSICAL MEMORY 



PROGRAM B 
100000 



PHYSICAL ADDRESS ( B A ) 



PROGRAM A 
006400 



000000 



11-3906 



Figure 4-31 Simplified Memory Relocation Example 
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Program A, starting address 0, is relocated by a constant to provide physical address 6400 8 . If the next 
processor virtual address is 2, the relocation constant will then cause physical address 6402 8 , which is 
the second item of Program A, to be accessed. When Program B is running, the relocation constant is 
changed to 100000 8 . Then, Program B virtual addresses, starting at 0, are relocated to access physical 
addresses starting at 100000 8 . Using the Active Page Address registers to provide relocation eliminates 
the need to "relink" a program each time it is loaded into a different physical memory location. The 
program always appears to start at the same address. 

A program is relocated in pages consisting of from 1 to 128 blocks. Each block is 32 words in length. 
Thus, the maximum length of a page is 4096 (128 X 32) words. Using all of the eight available Active 
Page registers in a set, a maximum program length of 32,768 words can be accommodated. Each of the 
eight pages can be relocated anywhere in the physical memory, as long as each relocated page begins 
on a boundary that is a multiple of 32 words. However, for pages that are smaller than 4K words, only 
the memory actually allocated to the page may be accessed. 

The relocation example shown in Figure 4-32 illustrates several points about memory relocation. 

1 . Although the program appears to be in contiguous address space to the processor, the 32K- 
word physical address space is actually scattered through several separate areas of physical 
memory. As long as the total available physical memory space is adequate, a program can be 
loaded. The physical memory space need not be contiguous. 

2. Pages may be relocated to higher or lower physical addresses with respect to their virtual 
address ranges. In the example shown in Figure 4-32, page 1 is relocated to a higher range of 
physical addresses, page 4 is relocated to a lower range, and page 3 is not relocated (even 
though its relocation constant is non-zero). 

3. All of the pages shown in the example start on 32-word boundaries. 

4. Each page is relocated independently. There is no reason why two or more pages could not 
be relocated to the same physical memory space. Using more than one Page Address register 
in the set to access the same space would be one way of providing different memory access 
rights to the same data, depending on which part of a program was referencing that data. 



PROCESSOR 



KT11-D 



VIRTUAL ADDRESS 
RANGES 



160000-177776 



140000- 157776 



120000- 137776 



100000-117776 



060000 - 077776 



040000 - 057776 



020000-037776 



000000-017776 



PAGE 
NO. 


RELOCATION 
CONSTANT 


7 


1500XX 


6 


0200XX 


5 


1000 XX 


4 


0200XX 


3 


0600XX 


2 


2500XX 


1 


3200 XX 


0 


4000XX 




PHYSICAL MEMORY 
SPACE 


400000 


- 417776 


32 0000 


- 337776 


250000 


- 267776 


1 50000 


- 167776 


100000 


- 117776 


060000 


- 077776 


020000 


- 037776 



Figure 4-32 Relocation of a 32K Word Program into 
124K-Word Physical Memory 
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4.12.2.3 Memory Units 

Block 32 words 

Page 1 to 1 28 blocks (32 to 4096 words) 

No. of Pages 8 per mode 

Size of Relocatable Memory 27,768 words max (8 X 4096) 

4.12.3 Protection 

A timesharing system performs multiprogramming; it allows several programs to reside in memory 
simultaneously, and to operate sequentially. Access to these programs, and the memory space they 
occupy, must be strictly defined and controlled. Several types of memory protection must be afforded 
a timesharing system. For example: 

1 . User programs must not be allowed to expand beyond allocated space, unless authorized by 
the system. 

2. Users must be prevented from modifying common subroutines and algorithms that are resi- 
dent for all users. 

3. Users must be prevented from gaining control of or modifying the operating system 
software. 

The memory management option provides the hardware facilities to implement all of the above types 
of memory protection. 

4.12.3.1 Inaccessible Memory - Each page has a 2-bit access control key associated with it. The key is 
assigned under program control. When the key is set to 0, the page is defined as non-resident. Any 
attempt by a user program to access a non-resident page is prevented by an immediate abort. Using 
this feature to provide memory protection, only those pages associated with the current program are 
set to legal access keys. The access control keys of all other program pages are set to 0, which prevents 
illegal memory references. 

4.12.3.2 Read-Only Memory - The access control key for a page can be set to 2, which allows read 
(fetch) memory references to the pages, but immediately aborts any attempt to write into that page. 
This read-only type of memory protection can be afforded to pages that contain common data, sub- 
routines, or shared algorithms. This type of memory protection allows the access rights to a given 
information module to be user-independent. That is, the access right to a given information module 
may be varied for different users by altering the access control key. 

A Page Address register in each of the sets (Kernel and User modes) may be set up to reference the 
same physical page in memory and each may be keyed for different access rights. For example, the 
User access control key might be 2 (read-only access), and the Kernel access control key might be 6 
(allowing complete read/write access). 

4.12.3.3 Multiple Address Space -There are two complete, separate PAR/PDR sets provided: one set 
for Kernel mode and one set for User mode. This affords the timesharing system with another type of 
memory protection capability. The mode of operation is specified by the processor status word current 
mode field, or previous mode field, as determined by the current instruction. 
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Assuming the current mode PSW bits are valid, the Active Page register sets are enabled as follows: 
PSW (Bits 15,14) PAR/PDR Set Enabled 
00 Kernel mode 




Illegal (all references aborted on access) 



1 1 User mode 

Thus, a User mode program is relocated by its own PAR/PDR set, as are Kernel programs. This 
makes it impossible for a program running in one mode to accidently reference space allocated to 
another mode when the Active Page registers are set correctly. For example, a user cannot transfer to 
Kernel space. The Kernel mode address space may be reserved for resident system monitor functions, 
such as the basic input/output control routines, memory management trap handlers, and timesharing 
scheduling modules. By dividing the types of timesharing system programs functionally between the 
Kernel and User modes, a minimum amount of space control housekeeping is required as the time- 
shared operating system sequences from one user program to the next. For example, only the user 
PAR/PDR sets needs to be updated as each new user program is serviced. The two PAR/PDR sets 
implemented in the memory management unit are shown in Figure 4-30. 

4.12.4 Active Page Registers 

The memory management unit provides two sets of eight Active Page registers (APRs). Each APR 
consists of a Page Address register (PAR) and a Page Descriptor register (PDR). These registers are 
always used as a pair and contain all the information required to locate and describe the current active 
pages for each mode of operation. One PAR/PDR set is used in Kernel mode and the other is used in 
User mode. The current mode bits (or in some cases, the previous mode bits) of the processor status 
word determine which set will be referenced for each memory access. A program operating in one 
mode cannot use the PAR/PDR sets of the other mode to access memory. Thus, the two sets are a key 
feature in providing a fully protected environment for a timesharing multiprogramming system. 

A specific processor I/O address is assigned to each PAR and PDR of each set. Table 4-12 is a 
complete list of address assignments. 

NOTE 

Unibus devices (except DMA and programmer's 
console) cannot access PARs or PDRs. The internal 
address decode logic (print Kl-10) allows only the 
processor to access these registers. 



Table 4-12 PAR/PDR Address Assignments 



Kernel Active Page Registers 



User Active Page Registers 



No. 


PAR 


PDR 


No. 


PAR 


PDR 


0 


772340 


772300 


0 


777640 


777600 


1 


772342 


772302 


1 


777642 


777602 


2 


772344 


772304 


2 


777644 


777604 


3 


772346 


772306 


3 


777646 


777606 


4 


772350 


772310 


4 


777650 


777610 


5 


772352 


772312 


5 


777652 


777612 


6 


772354 


772314 


6 


777654 


777614 


7 


772356 


772316 


7 


777656 


777616 
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In a fully protected, multiprogramming environment, the implication is that only a program operating 
in the Kernel mode would be allowed to write the PAR and PDR locations for the purpose of mapping 
user's programs. However, there are no restraints imposed by the logic that will prevent User mode 
programs from writing into these registers. The option of implementing such a feature in the operating 
system, and thus explicitly protecting these locations from user's programs, is available to the system 
software designer. 

4.12.4.1 Page Address Registers (PAR) - The Page Address register (PAR), shown on print Kl-7 and 
1 in Figure 4-33 contains the 12-bit Page Address Field (PAF) that specifies the base address of the 
page. 




Figure 4-33 Page Address Register 



Bits 15-12 are unused and reserved for possible future use. 

The Page Address register may be alternatively thought of as a relocation constant, or as a base 
register containing a base address. Either interpretation indicates the basic function of the Page 
Address register (PAR) in the relocation scheme. 

The Page Address register (PAR) may be regarded as either a base register containing a base address or 
a relocation constant. Bits are fed directly from the SSMUX to an address selected by the PAR/PDR 
ADRS MUX (E89 on print Kl-7) when enabled by Kl-10 PAR & PDR LOW L. The three scratchpad 
memories that comprise the PAR (E76, E77, and E78 on print Kl-7) are clocked by Kl-5 REG CLK 
H. The two associated with PAR 03:00 and PAR 07:04 are enabled by Kl-10 LOAD PAR LOW L, 
while the other (PAR 1 1:08) is enabled by Kl-10 LOAD PAR HIGH L. Outputs of the PARs are fed 
directly to the KTMUX on print Kl-9, and can be channeled onto the scratchpad output lines 
(SP15:00) when Kl-10 PAR & PDR L is asserted and Kl-10 KTMUX SO L is unasserted. This allows 
the contents of the registers to be accessed by a DATI or DATIP. 

4.12.4.2 Page Descriptor Registers - The Page Descriptor register (PDR) comprises four scratchpad 
memories (E79, E86, E87, and E88 on print Kl-7) and contains information regarding page expansion, 
page length, and access control (Figure 4-34). Bits are fed directly from the SSMUX to an address 
selected by the PAR/PDR ADRS MUX (E89 on print Kl-7) and clocked by Kl-5 REG CLK H. 



15 14 876543210 
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ACCESS CONTROL FIELD 
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w 


W////M 
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Figure 4-34 Page Descriptor Register 
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Access Control Field (ACF) 

This 2-bit field (PDR 02:01) of the PDR describes the access rights to the specified page. The access 
codes or "keys" [Kl-7 ACF 2 (1) H and Kl-7 ACF 1 (1) H from E86] specify the manner in which a 
page may be accessed and whether or not a given access should result in an abort of the current 
operation. A memory reference that causes an abort is not completed and is terminated immediately. 

Aborts are caused by attempts to access non-resident pages, page length errors, or access violations, 
such as attempting to write into a read-only page. All memory management traps vector through 
location 250 and can be used as an aid in gathering memory management information. 

In the context of access control, the term "write" is used to indicate the action of any instruction which 
modifies the contents of any addressable word. A "write" is synonymous with what is usually called a 
"store" or "modify" in many computer systems. Table 4-13 lists the four ACF keys and their func- 
tions. The ACF is written into the PDR under program control. 







Table 4-13 


Access Control Field Keys 


ACF 


Key 


Description 


Function 


00 


0 


Non-resident 


Abort any attempt to access this non-resident page. 


01 


2 


Resident read-only 


Abort any attempt to write into this page. 


10 


4 


Unused 


Abort all accesses. 


11 


6 


Resident read/write 


Read or write allowed. No trap or abort occurs. 



Expansion Direction (ED) 

The ED bit located in PDR bit 3 indicates the authorized direction in which the page can expand. A 
logic 0 in this bit (ED = 0) indicates the page can expand upward from relative zero. A logic 1 in this 
bit (ED = 1) indicates the page can expand downward toward relative zero. The ED bit is written into 
the PDR under program control. When the expansion direction is upward (ED = 0), the page length is 
increased by adding blocks with higher relative addresses. Upward expansion is usually specified for 
program or data pages to add more program or table space. An example of page expansion upward is 
shown in Figure 4-35. 

When the expansion direction is downward (ED = 1), the page length is increased by adding blocks 
with lower relative addresses. Downward expansion is specified for stack pages so that more stack 
space can be added. An example of page expansion downward is shown in Figure 4-36. 

NOTE 

To specify a block length of 42 for an upward-expan- 
dable page, write the highest authorized block num- 
ber directly into the highest byte of PDR. Bit 15 is 
not used because the highest allowable block number 
is 177,. 
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PAR 



PDR 



000 001 111 000 



0 0101001 0000 0 110 



PAF = 0170 
PL F = 51 8 = 41 1Q = BLOCK NO. 
ED=0= UPWARD EXPANSION 
ACF = 6= READ/WRITE 



NOTE: 

TO SPECIFY A BLOCK LENGTH OF 42 FOR AN UPWARD EXPANDABLE 
PAGE, WRITE HIGHEST AUTHORIZED BLOCK NO. DIRECTLY INTO HIGH 
BYTE OF PDR. BIT 15 IS NOT USED BECAUSE THE HIGHEST ALLOWABLE BLOCK 
NUMBER IS 177 8 

VIRTUAL ADDRESS BLOCK NO > PDR BLOCK NO.-^PAGE LENGTH ERROR (PLE) 



ADDRESS RANGE 
OF POTENTIAL PAGE 

EXPANSION BY 
CHANGING THE PLF 




x BLOCK 52 8 / 



AUTHORIZED PAGE 
LENGTH = 42 1Q BLOCKS 

OR 0 THRU 51 8 = 
52 8 BLOCKS 



024176 
BLOCK 51 8 

024100 



017276 
BLOCK 2 

017200 



017176 
BLOCK 1 

017100 



017076 
BLOCK 0 

017000 



ANY BLOCK NUMBER 
GREATER THAN 41 1Q (51 Q ) 

> (VA<12:06>)> 51 8 ) 

WILL CAUSE A PAGE 
LENGTH ABORT. 



START 
BLOCKS 

0241XX END 



01 70XX 
5 1 



-BASE ADDRESS OF PAGE 

11-1030 



Figure 4-35 Example of an Upward-Expandable Page 
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-ACTIVE PAGE REGISTER CONTENTS- 
PAR PDR 



OOO 001 111 000 



0101011 0 0000 1110 



PAF = 0170 



PLF = 126 8 = 86 10 



ED = 1 = DOWNWARD EXPANSION 



TO SPECIFY PAGE LENGTH FOR A DOWNWARD EXPANDABLE PAGE, 
WRITE COMPLEMENT OF BLOCKS REQUIRED INTO HIGH BYTE OF PDR. 

IN THIS EXAMPLE, A 42- BLOCK PAGE IS REQUIRED. 

PLF IS DERIVED AS FOLLOWS : 

42io = 52 8 ; TWO'S COMPLEMENT = 126 Q 

VIRTUAL ADDRESS BLOCK NO. <PDR BLOCK NO.-* PAGE LENGTH ERROR (PLE ) 



AUTHORIZED PAGE 
L EN GT H= 4 2 i o BLOCKS 



ADDRESS RANGE 
OF POTENTIAL PAGE 

EXPANS ION BY 
CHANG ING THE PLF 



036776 
BLOCK 177 8 

036700 



036676 
BLOCK 176 8 

036600 



036576 
BLOCK 175 8 

036500 



031676 
BLOCK 126 8 

031600 




^017176 
: BLOCK 1 

; 01 71 00 < 



0170764 
BLOCK 0 



17000 



, FIRST BLOCK OF DOWNWARD 
EXPANDABLE PAGE 



0170XX PAGE BASE 

126 BLOCKS 

031 6XX START 

52 BLOCKS 

0367XX END 



A BLOCK NUMBER 
REFERENCE LESS 
THAN 126 8 

(VA <12 : 06> LESS THAN 
WILL CAUSE A PAGE 
LENGTH ABORT. 



«*-BASE ADDRESS OF PAGE 



126 8 ) 



Figure 4-36 Example of a Downward-Expandable Page 
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Written Into (W) 

The W bit located in PDR bit position 6 indicates whether the page has been written into since it was 
loaded into memory. W = 1 is affirmative. The W bit is automatically cleared when the PAR or PDR 
of that page is written into. It can only be set by the control logic (print Kl-7). In disk-swapping and 
memory overlay applications, the W bit can be used to determine which pages in memory have been 
modified by a user. Those pages that have been written into must be saved in their current form; those 
that have not been written into (W = 1) need not be saved, and can be overlaid with new pages, if 
necessary. 

Page Length Field 

The 7-bit page length field (PLF) located in PDR bits 14:08 specifies the authorized length of the page 
in 32- word blocks. The PLF holds block numbers from 0 to 177 8 , thus allowing any page length from 1 
block to 128 blocks. The PLF is enabled by Kl-10 LOAD PDR HIGH L, ^nd written into the PDR 
under program control. 

PLF for an Upward-Expandable Page 

When the page expands upward (ED = 0), the PLF must be set to one less than the intended number of 
blocks authorized for that page. Thus, if the number of blocks authorized is 52 8 or 42io, the PLF is set 
to 5 1 8 or 41 io, with block 0 being the page boundary and the first block of the page. A comparator 
network (E60 and E61 on print Kl-8) compares the virtual address block number (VBA 12:06) with 
the PLF to determine whether the VBA is within the authorized page length. If the VBA block number 
is less than (A < B) or equal to (A = B) the PLF, the VBA is within the authorized page length. If the 
VBA block number is greater than (A > B) the PLF, a page length fault is detected by the hardware 
and Kl-8 KT FAULT L is issued to the DAT TRAN circuitry on print K2-1, where it generates K2-1 
ENAB ABORT H, causing a trap. When the expansion direction is upward, the page length is 
increased by adding blocks with higher relative addresses. Upward expansion is usually specified for 
program or data pages to add more program or table space (Figure 4-35). 

PLF for a Downward-Expandable Page 

The capability of providing downward expansion for a page is intended specifically for those pages 
that are to be used as stacks. In the PDP-1 1/34, a stack starts at the highest location reserved for it, 
and expands downward toward the lowest address as items are added to the stack. If the page is to be 
downward-expandable, the PLF must be set to authorize a page length (in blocks) that starts at the 
highest address of the page, which is always block 177 8 . The rationale for complementing the number 
of blocks required to obtain the PLF is as follows: 

Maximum Block No. Minus PLF Required Length Equals 

177 8 = 52 8 = 125 8 
127,o = 42 10 = 85io 

Figure 4-36 contains an example of a downward-expandable page. A page length of 42 blocks is 
arbitrarily chosen to match the upward-expandable example shown in Figure 4-35. 

NOTE 

The same PAF is used in both examples. This is done 
to emphasize that the PAF, as the base address, 
always determines the lowest address of the page, 
whether it is upward- or downward-expandable. 



4-68 



4.12.5 Virtual and Physical Addresses 

The memory management Unibus addressing circuitry is shown on print Kl-6. When memory man- 
agement is enabled (Kl-8 RELOCATE H asserted), the processor ceases to load Unibus addresses 
directly from the scratchpad via the Bus Address register multiplexer latches (E43, E54, and E64). 
Instead, addresses are relocated by various constants obtained from the memory management circui- 
try. (Selected PAR contents are added to the VBA using adders E44, E55, and E65.) 

4.12.5.1 Construction of a Physical Address - The basic information needed for the construction of a 
physical address (PA) comes from the virtual address (VBA), which is illustrated in Figure 4-37, and 
the appropriate PAR set. 



APF 



ACTIVE PAGE FIELD 



DISPLACEMENT FIELD 



Figure 4-37 Interpretation of a Virtual Address 



The virtual address (VBA) consists of: 

1 . The Active Page Field (APF). This 3-bit field determines which of eight Active Page registers 
(APR0-APR7) will be used to form the physical address (BA). The PAR/PDR ADRS 
MUX (E89 on print Kl-7) actually selects the specific PAR. 

2. The Displacement Field (DF). This 13-bit field contains an address relative to the beginning 
of a page. This permits page lengths up to 4K words (2 13 = 8K bytes). The DF is further 
subdivided into two fields as shown in Figure 4-38. 



BN 



DIB 



BLOCK NUMBER 



DISPLACEMENT IN BLOCKS 
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Figure 4-38 Displacement Field of Virtual Address 



The displacement field (DF) consists of: 

1. The Block Number (BN). This 7-bit field is interpreted as the block number within the 
current page. 

2. The Displacement in Block (DIB). This 6-bit field contains the displacement within the 
block referred to by the block number. 
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The remainder of the information needed to construct the physical address comes from the 12-bit page 
address field (PAF) (part of the Active Page register) and specifies the starting address of the memory 
which that APR describes. The PAF is actually a block number in the physical memory, e.g., PAF = 3 
indicates a starting address of 96 (3 X 32 = 96) words in physical memory. 

The formation of the physical address is illustrated in Figure 4-39. 



15 13 12 









APF 

i 


BLOCK NO. 
1 


DIB 



PAGE ADDRESS FIELD 



■O- 
I 



VIRTUAL 
ADDRESS 



ACTIVE PAGE 
REGISTER 



PHYSICAL BLOCK NO. 



DIB 
l 



PHYSICAL 
ADDRESS 



(DISPLACEMENT IN BLOCKS) 



Figure 4-39 Construction of a Physical Address 



The logical sequence involved in constructing a physical address is as follows: 



1. Select a set of Active Page registers depending on current mode. 

2. The active page field of the virtual address is used to select an Active Page register (APRO- 
APR7). 

3. The page address field of the selected Active Page register contains the starting address of 
the currently active page as a block number in physical memory. 

4. The block number from the virtual address is added to the block number from the page 
address field to yield the number of the block in physical memory which will contain the 
physical address being constructed. 

5. The displacement in block from the displacement field of the virtual address is joined to the 
physical block number to yield a true 18-bit physical address. 



4.12.5.2 Determining the Program Physical Address - A 16-bit virtual address can specify up to 32K 
words, in the range from 0 to 177776 (work boundaries are even octal numbers). The three most 
significant virtual address bits designate the PAR/PDR set to be referenced during page address relo- 
cation. Table 4-14 lists the virtual address ranges that specify each of the PAR/PDR sets. 
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Table 4-14 Relating Virtual Address to PAR/PDR Set 



Virtual Address Range 


PAR/PDR Set 


000000-17776 


0 


020000-37776 


1 


040000-57776 


2 


060000-77776 


3 


100000-117776 


4 


120000-137776 


5 


140000-157776 


6 


160000-177776 


7 



NOTE 

Any use of page lengths less than 4K words causes 
holes to be left in the virtual address space. 



4.12.6 Status Registers 

Aborts generated by the protection hardware are vectored through Kernel virtual location 250. Status 
registers SR0 and SR2 are used to determine why the abort occurred. Note that an abort to a location 
which is itself an invalid address will cause another abort. Thus the Kernel program must ensure that 
Kernel virtual address 250 is mapped into a valid address; otherwise a loop will occur which will 
require console intervention. 

4.12.6.1 Status Register 0 (SR0) - SR0 contains abort error flags, memory management enable, plus 
other essential information required by an operating system to recover from an abort or service a 
memory management trap. The SR0 format is shown in Figure 4-40. Its address is 777572. Circuitry 
used to implement the SR0 register is shown on print Kl-8. 



15 14 13 12 9 8 7 6 5 4 3 10 




ADDRESS 
777572 



ABORT- NON-RESIDENT 1 1 1 

ABORT-PAGE LENGTH ERROR 1 

ABORT- READ ONLY I 

ACCESS VIOLATION 

MAINTENANCE MODE 1 

MODE 1 

PAGE NUMBER 1 

ENABLE MANAGEMENT 1 
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Figure 4-40 Format of Status Register 0 (SR0) 
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Bits 15-13 are the abort flags. They may be considered to be in a "priority queue" in that flags to the 
right are less significant and should be ignored. For example, a "non-resident" abort service routine 
would ignore page length and access control flags. A "page length" abort service routine would ignore 
an access control fault. 

NOTE 

Bit 15, 14, or 13, when set (abort conditions), causes 
the logic (E121 generates Kl-8 ERROR H) to freeze 
the contents of SRO bits 1 to 6 and status register 
SR2. This is done to facilitate recovery from the 
abort. 

Protection is enabled when an address is being relocated (Kl-8 RELOCATE H is active). This implies 
that either SRO, bit 0, is equal to 1 (memory management enabled) or that SRO, bit 8, is equal to 1 and 
the memory reference is the final one of a destination calculation (maintenance/destination mode). 

Note that SRO bits 0 and 8 can be set under program control to provide meaningful memory manage- 
ment control information. However, information written into all other bits is not meaningful. Only 
that information which is automatically written into these remaining bits as a result of hardware 
actions is useful as a monitor of the status of the memory management unit. Setting bits 15-13 under 
program control will not cause traps to occur. These bits, however, must be reset to 0 after an abort or 
trap has occurred in order to resume monitoring memory management. 

Abort-Non-Resident 

Bit 15 is the Abort-Non-Resident bit [Kl-8 NR (1) H]. It is set by attempting to access a page with an 
access control field (ACF) key equal to 0 or 4 or by enabling relocation with an illegal mode in the 
PSW. 

Abort-Page Length 

Bit 14 is the Abort-Page Length bit [Kl-8 PL (1) H]. It is set by attempting to access a location in a 
page with a block number (virtual address bits 12-6) that is outside the area authorized by the page 
length field (PFL) of the PDR for that page. 

Abort-Read-Only 

Bit 13 is the Abort-Read-Only bit [Kl-8 RO (1) H]. It is set by attempting to write in a read-only page 
having an access key of 2. 

NOTE 

There are no restrictions that any abort bits could 
not be set simultaneously by the same access 
attempt. 

Maintenance/ Destination Mode 

Bit 8 specifies maintenance use of the memory management unit. It is used for diagnostic purposes. 
For the instructions used in the initial diagnostic program, bit 8 is set so that only the final destination 
reference is relocated. It is useful to prove the capability of relocating addresses, in destination mode 
only. 

Mode of Operation 

Bits 5 and 6 indicate the CPU mode (User or Kernel) associated with the page causing the abort 
(Kernel = 00, User = 11). 
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Page Number 

Bits 3-1 contain the page number of reference. Pages, like blocks, are numbered from 0 upward. The 
page number bit is used by the error recovery routine to identify the page being accessed if an abort 
occurs. 

Enable Relocation and Protection 

Bit 0 is the Enable bit. When it is set to 1, all addresses are relocated and protected by the memory 
management unit. When bit 0 is set to 0, the memory management unit is disabled and addresses are 
neither relocated nor protected. 

4.12.6.2 Status Register 2 (SR2) - SR2 (shown on print Kl-9) is loaded with the 16-bit virtual address 
(VBA) at the beginning of each instruction fetch but is not updated if the instruction fetch fails. SR2 is 
read-only; a write attempt will not modify its contents. SR2 is the virtual address program counter. 
Upon an abort, the result of SRO bits 15, 14, or 13 being set will freeze SR2 until the SRO abort flags 
are cleared. The address of SR2 is 777576 (Figure 4-41). 



16-BIT VIRTUAL ADDRESS 



ADDRESS 
77 7576 



Figure 4-41 Format of Status Regiser 2 (SR2) 



4.12.7 Mode Description 

In Kernel mode, the operating program has unrestricted use of the machine. The program can map 
users' programs anywhere in core and thus explicitly protect key areas (including the device registers 
and the processor status word) from the user operating environment. 

In User mode, a program is inhibited from executing a Halt instruction and the processor will trap 
through location 10 if an attempt is made to execute this instruction. A Reset instruction results in 
execution of a NOP (no-operation) instruction. 

There are two stacks, called the Kernel stack and the User stack, used by the central processor when 
operating in either the Kernel or User mode, respectively. 

Stack limit violations are disabled in User mode. Stack protection is provided by memory protect 
features. 

4.12.8 Interrupt Conditions 

The memory management unit relocates all addresses. Thus, when management is enabled, all trap, 
abort, and interrupt vectors are considered to be in Kernel mode virtual address space. When a vec- 
tored transfer occurs, control is transferred according to a new program counter (PC) and processor 
status word (PSW) contained in a 2-word vector relocated through the Kernel Active Page register set. 

When a trap, abort, or interrupt occurs, the "push" of the old PC (old PSW) is to the User/Kernel R6 
stack specified by CPU mode bits 15(14) of the new PSW in the vector (00 = Kernel, 1 1 = User). The 
CPU mode bits also determine the new APR set. In this manner it is possible for a Kernel mode 
program to have complete control over service assignments for all interrupt conditions, since the 
interrupt vector is located in Kernel space. The Kernel program may assign the service of some of these 
conditions to a User mode program by simply setting the CPU mode bits of the new PSW in the vector 
to return control to the appropriate mode. 
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User Processor Status (PS) operates as follows: 



PSW Bits 

Cond. Codes (3-0) 
Trap (4) 
Priority (7-5) 
Previous (13-12) 
Current (15-14) 



User RTI, RTT 
Loaded from stack 
Loaded from stack 
Cannot be changed 
Cannot be changed 
Cannot be changed 



User Traps, 
Interrupts 

Loaded from vector 
Loaded from vector 
Loaded from vector 
Copied from PS (15, 14) 
Loaded from vector 



Explicit 
PSW Access 

* 

Cannot be changed 

* 
* 



♦Explicit operations can be made if the processor status is mapped in user space. 



4.13 CONTROL STORE 



4.13.1 General Description 

The Control Store circuit (prints K2-7 through K2-10) consists of twelve 512-word by 4-bit bipolar 
ROMs, eight hex D-type flip-flops, and an assortment of multiplexers and gates. This logic operates in 
a fashion similar to a microprocessor having 9 address lines and 48 data output lines with a fixed set of 
ROM program routines. 

Each Control Store ROM location can generate a specific set of outputs capable of configuring the 
data path, determining the function performed by the arithmetic/logic unit (ALU), influencing the 
DAT TRAN circuitry, or exercising general control over the total KD1 1-E operation. The contents of 
each location are configured in such a way that sequences of locations can be combined into micro- 
routines that perform the various PDP-11 instruction operations. Each ROM location is, therefore, 
considered as a microinstruction or microstep. 

4.13.2 Branching Within Microroutines 

Each microinstruction in the Control Store specifies the location of the next microstep in a sequence. 
After the execution of a microstep, the outputs of ROMs E107, E108, and E109 are latched into E89 
and E91 (microprogram counter latch) to specify the location of the next microstep. Conditional 
branching within a microroutine is accomplished by wire-ORing signals generated by external hard- 
ware onto the MPC lines when directed by some other Control Store output. Typical wire-ORed 
signals include the following: 

Instruction Decode The microroutines contained in the Control Store are designed 

to perform efficiently the operations specified by the various 
PDP-11 instructions. Specific microroutines are implemented 
for specific instructions. The main purpose of the IR Decode 
circuitry is to translate the PDP-1 1 instruction in the IR to a set 
of bits that can be wire-ORed onto the MPC lines upon request 
(IR DECODE L), developing the next control word. A descrip- 
tion of the specific addresses for each instruction is included in 
Paragraph 4.5.3 of this manual. 
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Trap Decode A routine has also been included in the Micro Store to imple- 

ment an error routine that pushes and pops the PC and PSW 
onto or off the processor stack. Upon request of the Control 
Store [K2-9 BUT SERVICE (1) H], the MPC 00 line can be 
enabled by the Service ROM (E50), causing a microbranch to 
this microroutine. 



PWR Restart Upon performing a power restart, the MPC is cleared by an 

Initialize signal (INIT). The power-up circuitry on print K2-3 
then enables the MPC 00 line, forcing the Control Store to per- 
form the power-up routine beginning at MPC address 001. 



In general, microsteps are not executed from numerically sequential locations in the Control Store; 
therefore, care should be taken in following the flows described in Chapter 5 of this manual. 

Figure 4-42 shows the format of all 512 words in the KD11-E Control Store. The fields, the possible 
values they contain, and the significance of each value are described below. 



00 


01 


02 




03 


04 


05 


06 


07 




08 


09 




10 


11 




1 2 
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14 
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TRAN 
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16 


17 


18 




19 


V 
MPC 

20 


21 


22 


23 




24 


25 


V 
MISC 
CONTROL 

26 27 




28 




V 
BUS 
CONTROL 

29 30 


31 


LOAD 
BAR 


LONG 
CYCLE 


AUX 
CONT 












B 


BX 


ovx 


DBE 
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CONTROL 






V 
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CONTROL 
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AMUX 
CONTROL 
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35 


36 
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38 
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42 
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SPA 
SEL 


SRC 
SEL 






FORCE 
RSVI 


PREV 
MODE 


BUT 
SERV 













BUT SPA DEST FORCE ROM 

SEL KERNEL SPA 
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Figure 4-42 Control Store Fields 
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4.13.3 Control Store Fields 

Use the KD11-E flow diagrams as reference for actual control field bit patterns. 
Field Field Length Description 

MPC 9 Nine-bit micro-PC address, which specifies the ROM loca- 

tion of the next microstep to be performed. 

Miscellaneous Control Three multiplexed control lines that generate the following 

enable signals: 

LOAD IR L - Allows loading of the Instruction register 
(print K2-5). 

LOAD PSW L - Allows the PSW register to be loaded upon 
completion of this microstep (prints Kl-1 through Kl-4). 

LOAD CC L - Allows the condition codes N, Z, V, and C to 
be loaded upon completion of this microstep (print Kl-1). 

BUT DEST L - Enables microbranch to destination operand 
microcode sequence (print K2-6). 

ENAB STOV L - Enables the stack overflow detection cir- 
cuit (print K2-3). 

LOAD COUNT L - Allows the counter circuit (print K2-10) 
to be loaded upon completion of this microstep. 

CLK COUNT L - Enables the counter clock circuit (print 
K2-10). 

BUF DAT TRAN 1 Enables the data transfer circuitry (print K2-1). Indicates that 

the processor is performing a Unibus transfer during this 
microstep. 

Bus Control 2 Enables the Unibus control lines BUS CO L and BUS CI L, 

as follows: 



C1(1)H C0(1)H Transfer 

0 0 DATI 

0 1 DAT1P 

1 0 DATO 
1 1 DATOB 



ENAB MAINT 1 Enables the memory management maintenance relocation 

feature. 

LOAD BAR 1 Allows the Physical Bus Address register (BA on print Kl-6) 

to be loaded during this microstep. 
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Field 



Field Length Description 



LONG CYCLE 1 



Forces the processor to perform a longer (240 ns) machine 
cycle during this microstep. Typically this is done during bus 
DATOs. 



AUX CONTROL 1 



ALU S3-ALU SO 5 
ALU MODE, 
ALU CIN 
BLEG 01:00 

B, BX, OVX, 4 
DBE, CONTROL 



SSMUX 

CONTROL 2 



Enables the Auxiliary Control ROMs during operate instruc- 
tion microsteps. 

Determine the operation performed by the 16-bit ALU 
according to Table 4-2. These lines are also wire-ORed, 
allowing the Auxiliary Control circuitry to determine the 
ALU operations according to Table 4-2. 

These multiplexed outputs control the operation of the B reg- 
ister and BX register during each microstep and detect over- 
flow or double bus errors. 

Controls the select lines of the SSMUX according to the 
following: 



Select 



SS01H 



SS 00 H 



Straight 
Sign Extend 
Swap Bytes 
External Data 



0 
0 
1 
1 



0 
1 
0 

1 



AMUX 2 
CONTROL 



Controls the select lines of the AMUX according to the 
following: 



Data 



AMUX SI 



AMUX SO 



PSW 
ALU 
Vector 
Unibus 



0 
0 
1 
1 



0 
1 
0 

1 



BUT BITS 



SPA SRCSEL 



Encoded control lines that select the specific microbranch 
condition that can occur during this microstep. 

Controls the select lines of the scratchpad address multiplexer 
during the first half of this microstep. 



Field Select 



SEL1 



SEL0 



ROM 
RS 
RD 
RBA 



0 
0 
1 
1 



0 

1 

0 

1 
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Field Field Length Description 

SPA DST SEL 2 Controls the select lines of the scratchpad address multiplexer 

during the second half of this microstep. 



Field Select SEL 1 SELO 

ROM 0 0 

RS 0 1 

RD 1 0 

RBA 1 1 



FORCE RSV1 



PREVIOUS 1 
MODE 

BUT SERVICE 1 



Force Kernel 



Controls which source register will be selected by the scratch- 
pad address multiplexer. If RS = is an even-numbered regis- 
ter, then RSV1 = Register 1. If, however, RS = an odd- 
numbered register, then RSV1 = the same register. 

Allows the processor to perform this microstep using the pre- 
vious memory management mode [PSW (13:12)]. 

Indicates that the processor has entered the Service micro- 
step. Enables the Service ROM (E50), causing the processor 
to recognize any pending errors or interrupts. 

Forces the processor to perform this microstep in the memo- 
ry management Kernel mode. 



ROM SPA 4 Allows the microinstructions from the Control Store to deter- 

mine which scratchpad register will be addressed during the 
next microstep, unless otherwise specified by the scratchpad 
address multiplexer control lines previously mentioned. 
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CHAPTER 5 
MICROCODE 



5.1 MICROPROGRAM FLOWS 

A complete set of microinstruction flows is shown in block diagram form in the KD11-E print set. 
Figure 5-1 is a simplified version that provides an overview and aids in using the detailed flows. No 
attempt will be made in this manual to trace each path of this microcode, but the following examples 
should provide an adequate background for the reader. 

5.2 FLOW NOTATION GLOSSARY 

The block flows should be self-explanatory. To aid in understanding them, the following glossary of 
flow notation should be reviewed. 



Designation 

BA 



DATI 

+ 

PC 

B 

IR 

BX 

RS 

RD 

RN 

ENAB STOV 
ENAB DBE 
DATO 
DATIP 
Rn OP B 

BUT 

LOAD CC 

UDATA 

RSV1 



MAINT 
Previous 



Definition 

Unibus Bus Address lines 
Minus the operator 
Separator 

Initiate DATI operation on Unibus 

Plus the arithmetic operator 

Program Counter = scratchpad register 7 (R7) 

B register 

Instruction register 
BX register 

Scratchpad register specified by the source portion of the current instruction 
[IR (08:06)] 

Scratchpad register specified by the destination portion of the current 
instuction [IR (02:00)] 

Scratchpad register n specified by the Control Store ROM SPA lines 
Enable the stack overflow detection logic 
Enable the double bus error detection logic. 
Initiate DATO operation on Unibus. 
Initiate DATIP operation on Unibus. 

ALU function determined by the auxiliary ALU control logic as a function 
of the instruction currently in the Instruction register. 
Branch on microtest. 

Set condition codes (N, Z, V and C) according to the result of operation 
being performed by the ALU. 

Data being received from the Unibus data lines BUS D00 L through BUS 
D15 L. 

Source register specified by source portion of current instuction [IR (08:06)] 
ORed with a logical 1. Example: If RS is even, RSV1 would be the next 
highest register (RS = 4, RSV1 = 5); if, however, RS is odd, RSV1 would be 
the same register (RS = 5, RSV1 = 5). 
Assignment operator. 

Indicates that the memory management Maintenance feature is enabled. 
Indicates that this microstep is using the previous memory management 
mode. 
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MFPI (D) 



MTPKD) 



MFPS 



- MTPS 



MUL / DIV 



ASH/ASHC 



ROT/SHFT «_ 



— SWAB 




JMP 



JSR +- 



RTI / RTT 



RTS «•-» 



RESET 



CLEAR CC *- 



_ SET CC 



SOB 



— MARK +- — 



BRANCH 
CHANGE PC 



NEG 



SUB 
SM0-OM0 



MOV 
SM0-DM0 



POP 

(MOV+SUB) 

MOD 
SM0 - DM0 



DOP 
NON MOD 
SM0-DM0 



DOP 



SM0-DM0 



SOP 
NON MOD 



SOP MOD 




MOV PEST 
SM0-DM0 



POP PEST 
MOV -SUB 



OOP PEST 
NON MOO 
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Figure 5-1 KD11-E Simplified Flow Diagram 



